<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="71"><package pkgid="ff41e2558d15d223939ed0d34c77a00c4659883385225afab7956d67f32a66f5" name="coolkey" arch="src">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="398adc2b5fdb6fbd1f2fac0dceb3747a67f1a1fa5d3e599dc77f76d9c34f0133" name="coolkey" arch="x86_64">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="440aa3d7d19e4ec95a1b03cc339b785f9b5b87e7611e646a701bda5205f8c08d" name="coolkey-32bit" arch="x86_64">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="ba365e459f5490a4e11116c3fd839d0e1f4ffa89883e00a0ced818ba41009323" name="coolkey-devel" arch="x86_64">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="07b2651e80a533cb73cb95a6c464f2d72f2bc70a800202df68dcb6a2ccd8136e" name="libXi" arch="src">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="fab628815bba86ff21e837fe90c2a227f3e4d089aa65f1d35b60849c71a07aa6" name="libXi-devel" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="1fd223bef278ff7fcb16b0101e184ecbd3e5dd884960a11461b2696a56a605c5" name="libXi-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="e426709ca0e06b9a82a88997eae2c786a19fe77f0b5e50e6725a3ca7f9a115c6" name="libXi6" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="1134c2f6a860ea3eadd5d50593a4ae7759fbb63110b58af209a511cee41cd101" name="libXi6-32bit" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="65c389b27bf20c437b7fb4a86e03fb2d423f3b877791aef2cef321b2079856c7" name="libkcapi" arch="src">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="18cb195a356373404e5d0693703bc4294fd60d6474964e96a8919c46ad79fd74" name="libkcapi-devel" arch="x86_64">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="417541a5dc2f3b4120a32413eee30ebdabc9e6608198d209b5a4de75b81339a6" name="libkcapi-tools" arch="x86_64">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="2ac9eacaed5ea6e3fedf7c74d7649bec7b0ab0df98d7d84963382677170c89f0" name="libkcapi0" arch="x86_64">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="d95de8d07a7529b8a9f86d618d6cf7036cabf979dcc2f7d57bf728a9e3ddb194" name="python-virtualbox" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="09a9c9a05f7b6d99399c2415566dfaf89eefdebb88fa5f8f5f3a3c90c423bc6b" name="ruby2.1-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="7573a0ce1af2e22358ddc201c5d9dfb6ca4875eed6f1c3dea5b53d1a97c60898" name="ruby2.1-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="1ce6f60ceba9e90fc9d02a532f3845269efe3eccde07d0e7d1467af2b36eb395" name="ruby2.1-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="23190509b29c2a2ff0612520cc059635c4e194e24ad025c14bdcfa5714ca87b1" name="ruby2.2-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="eb63f2527774da721cccf6db088171b39f639bc3f43485f267e2a4fa3bc59e00" name="ruby2.2-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="be5af26dc3d3dc51ad42fb56dc23942fa8875db06a31179a98afdb9a3207f812" name="ruby2.2-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="183205c254cbae95a49b4519b298f8fc21c8c0188a6283dc717a6bba64687968" name="ruby2.3-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="27b281f283c177909994f29aca39e29ccd1b0909023f07913850731532a41e68" name="ruby2.3-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="9e8b3eca21a86378c9eb4acd816685d33fa2da2be0d87ce8874daefc0552a214" name="ruby2.3-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="1333f549397e7ed20e89b490878f0a66f4f3aae579748d325656027e83f40840" name="ruby2.4-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="a1bce455b08cc762248ba8dfdb0f6c251cbbabcb92ebd8b4f5d97228b33de482" name="ruby2.4-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="1f7f8ff08b49e365e1857caac6ce7825f1b99c30928baf4c31bc1b94286da52d" name="ruby2.4-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="c3bc167835c6881678e622878dde5d1ec992a59079020d805b594d5659784f7a" name="rubygem-puppet" arch="src">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="1a80e331c6c4273523c203214008bc763a21a1bb6e07bf923dafd0a8ca423e31" name="rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="f77f0c6e08bd4323a3374d8b7d0d9a04b3b8767b17d05a45b495a643065c2d36" name="rubygem-puppet-emacs" arch="noarch">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="f2db79e641ce607446e391444ce526083a3662d200f723bcc60524316c6d5bf5" name="rubygem-puppet-master" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="4e1f7e6b9a03abcb76c1b8f1eef09fff58c2a6b7b02c05c4a831cc23244e2dcc" name="rubygem-puppet-master-unicorn" arch="noarch">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="190c4ed928512e1d687d9e36f0e96fa5f19f381727d906ec2f8ed8e3476aa914" name="rubygem-puppet-vim" arch="noarch">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="46e6eee38dd7e1648f6473a0d2648a78e31b7c9a1dcf101fa7bff6747362df9e" name="smartmontools" arch="src">
    <version epoch="0" ver="6.5" rel="8.1"/>

<changelog author="sbrabec@suse.cz" date="1353412800">- Re-introduce smartmontools-sysconfig.patch with
  SMARTD_SAVESTATES, SMARTD_ATTRLOG and SMARTD_EXTRA_OPTS sysconfig
  variables (bnc#790044).</changelog>
<changelog author="sbrabec@suse.cz" date="1354190400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1355313600">- Use sysconfig variables (sed on smartd.service.in) and generate
  smartd_opts for systemd smartd.service.
- Remove obsolete parsing of /etc/default/smartmontools
  (it is no more in upstream installation).</changelog>
<changelog author="sbrabec@suse.cz" date="1363608000">- Update to version 6.1:
  * smartctl -l improved.
  * smartctl -s/-g wcache and rcache for SCSI devices.
  * smartctl prints more info for ATA and SCSI devices.
  * smartctl '--identify' updated for latest ATA ACS-3 spec.
  * smartd runs /etc/smartd_warning.sh to generate warning emails.
  * smartd '-w PATH' option to specify this executable.
  * smartd '-d ignore' directive.
  * smartd DEVICESCAN ignores devices already specified.
  * smartd: added support for -s and -A for SCSI devices.
  * smartd '-W' directive uses ATA attribute 190 if 194 is missing.
  * Support of larger SCSI defect lists via READ DEFECT(12).
  * Device type '-d usbjmicron,p' for Prolific USB bridges.
  * Many HDD, SSD and USB additions to drive database.
  * Support for SAS disks behind Areca controllers.
  * Improved support for SATA disks on LSI/Megaraid controllers.
  * Disks on MegaRaid controllers are automatically scanned.
- smartmontools.keyring: New signing key for the next 2 years.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365076800">- remove all sysvinit support.</changelog>
<changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
<changelog author="sbrabec@suse.cz" date="1375099200">- Update to version 6.2:
  * smartctl: Added ATA write cache reordering control using
    '-g wcreorder' and '-s wcreorder,[on|off]' options.
  * update-smart-drivedb: Updated for new SVN repository.
  * HDD, SSD and USB additions to drive database.
  * Areca RAID support: Fixed possible segfault on empty port.
  * HPT RAID support: Maximum disk number increased to 128.</changelog>
<changelog author="sbrabec@suse.com" date="1386244800">- Add supplementary drivedb.h update script
  (smartmontools-drivedb_h-update.sh, bnc#851276).
- Skip drivedb.h verification by rpm -V (bnc#851276).
- Implement intelligent drivedb.h update not overwriting newer
  drivedb.h releases.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch trunk.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.</changelog>
<changelog author="ro@suse.de" date="1409745600">- update to version 6.3
  - smartctl: Fixed bogus error messages from '-g/-s wcreorder'.
  - smartctl prints ATA form factor.
  - SCSI: Improved support of modern disks (SAS SSDs).
  - SCSI: Fixed sense data noise from old disks.
  - update-smart-drivedb man page.
  - configure option '--with-smartdscriptdir'.
  - configure option '--with-smartdplugindir'.
  - configure option '--with-systemdenvfile'.
  - configure option '--with-working-snprintf'.
  - Removed build time stamps to support reproducible builds.
  - Compile fixes for C++11.
  - HDD, SSD and USB additions to drive database.
  - Linux: Support for controllers behind AACRAID driver.
  - Linux: Fixed DEVICESCAN max path count.
  - FreeBSD: Fixed possible crash caused by wrong SCSI error handling.
  - FreeBSD: Compile fix for kFreeBSD.
  - Windows: Reworked CSMI port scanning.
  - QNX: Compile fix.
- dropped patches:
  smartmontools-nobuild-date.patch (code removed upstream)</changelog>
<changelog author="ro@suse.de" date="1409745601">- re-add sysvinit support in specfile (fix build on sles11)</changelog>
<changelog author="sbrabec@suse.cz" date="1412683200">- Re-add /usr/sbin/rcsmards symlink (bnc#900099).
- Fix service restart in smartmontools.generate_smartd_opts.in
  (bnc#900099).</changelog>
<changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
<changelog author="sbrabec@suse.cz" date="1425384000">- Improve drivedb.h update scriptlets: Detect update across
  branches.
- Check state of smartmontools-drivedb.h in %prep.
- Add ghost records for files created by update-smart-drivedb.
- Improve smartmontools-drivedb_h-update.sh script: Perform spec
  file changess.
- Clean up on uninstall.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch RELEASE_6_3_DRIVEDB.</changelog>
<changelog author="sbrabec@suse.cz" date="1425902400">- Package empty /etc/smartd_warning.d for warning plugins.
- smartmontools-drivedb_h-update.sh: Fix default branch name.
- Comment fixes.</changelog>
<changelog author="sbrabec@suse.cz" date="1425988800">- Run Self Tests:
  * Short Self Test every night
  * Extended Self Test every month
  * Discussion:
    http://lists.opensuse.org/opensuse-factory/2015-03/msg00040.html
- Dropped smartmontools-removable.patch
- Created smartmontools-suse-default.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1452427200">- Update to version 6.0.4
  * Device type '  *d usbprolific' for Prolific PL2571/277x USB bridges.
  * SAT: Support for ATA registers returned in fixed format sense data.
  * smartctl '  *i' and '  *  *identify': ATA ACS  *4 and SATA 3.2 enhancements.
  * smartctl '  *l xerror': Support for logs with more than 255 pages.
  * smartctl '  *l devstat': Prints ACS  *3 DSN flags.
  * smartctl '  *l devstat': Read via SMART command if GP log is not
    available.
  * smartctl '  *l scttempsts': Prints SCT SMART STATUS (ACS  *4) and
    vendor specific SCT bytes.
  * configure option '  *  *with  *systemdenvfile=auto' as new default.
  * configure options '  *  *disable  *drivedb', '  *  *enable  *savestates'
    and '  *  *enable  *attributelog' are deprecated.
  * Corresponding '  *  *with  **' options are enhanced accordingly.
  * Configure option '  *  *with  *docdir' is deprecated.
  * autoconf &lt; 2.60 and automake &lt; 1.10 are deprecated.
    (all of the above still work but a warning is printed if used)
  * HDD, SSD and USB additions to drive database.
  * Linux: AACRAID fixes, SMART STATUS should work now.
  * Linux: '/dev/megaraid_sas_ioctl_node' fd leak fix.
  * Darwin: '  *S' command implemented, '  *l devstat' should work now.
  * Cygwin: Compile fix.
  * Windows: Device type '  *d aacraid' for AACRAID controllers.
  * Windows: SAT autodetection based on IOCTL_STORAGE_QUERY_PROPERTY.
  * Windows installer: Fix possible loss of user PATH environment variable.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch RELEASE_6_4_DRIVEDB.
- Cleanup and remove conditional macros; the package doesn't build
  for SLE anyway
- Remove smartmontools-default-enabled.patch; not needed anymore</changelog>
<changelog author="meissner@suse.com" date="1452772800">- replaced keyring with 2015/2016 key.
  pub   rsa2048/0xDF0F1A49C4A4903A 2014-12-31 [verfällt: 2016-12-31]
  Schl.-Fingerabdruck = F41F 01FC 0784 4958 4FFC  CF57 DF0F 1A49 C4A4 903A
  uid                [  unbekannt] Smartmontools Signing Key (through 2016) &lt;smartmontools-support@lists.sourceforge.net&gt;</changelog>
<changelog author="aginies@suse.com" date="1481112000">- update to 6.5 version
  * Experimental support for NVMe devices on FreeBSD, Linux and Windows.
  * smartctl '-i', '-c', '-H' and '-l error': NVMe support.
  * smartctl '-l nvmelog': New option for NVMe.
  * smartd.conf '-H', '-l error' and '-W': NVMe support.
  * Optional NVMe device scanning support on Linux and Windows.
  * configure option '--with-nvme-devicescan' to include NVMe in
  * default device scanning result.
  * Device scanning now allows to specify multiple '-d TYPE' options.
  * ATA: Added new POWER MODE values introduced in ATA ACS-2.
  * ATA: SCT commands are no longer issued if ATA Security is locked.
  * SCSI: LB provisioning improvements.
  * SCSI: Fixed GLTSD bit set/cleared info messages.
  * SCSI: Solid State media log page is no longer checked for tapes.
  * SCSI: Improved handling when no tape cartridge in drive.
  * SCSI: Workaround for buggy Seagate firmware.
  * SAT: Improved heuristics to detect bogus sense data from SAT layer.
  * smartd: Fixed crash on missing argument to '-s' directive.
    update-smart-drivedb: Now uses HTTPS for download by default.
  * update-smart-drivedb: New options to select URL and download tool.
  * update-smart-drivedb: New download tool 'svn'.
  * configure option '--without-update-smart-drivedb' to disable
    update-smart-drivedb script.
  * configure options '--disable-drivedb', '--enable-savestates',
    '--enable-attributelog' and '--with-docdir' are no longer supported.
  * autoconf &lt; 2.60 and automake &lt; 1.10 are no longer supported.
  * Drive database file now also includes the DEFAULT setting
    for each attribute.
  * HDD, SSD and USB additions to drive database.
  * Darwin: New support files for package installer.
  * New makefile target 'install-darwin' builds DMG image.
  * Solaris: Auto detection of SATA devices behind SAT layer.
  * Solaris SPARC: Legacy ATA support disabled by default.
    New configure option '--with-solaris-sparc-ata' enables it.
    File os_solaris_ata.s is no longer included in source tarball.
  * Windows: Auto detection of USB devices specified by drive letter.
  * Windows: Device scanning does no longer ignore unknown USB devices.
  * Windows: Prevent drive spin up by '-n standby' check.
  * Windows: New application manifests indicating Win 10 support.
  * Windows smartd: '-m [sys]msgbox' is no longer supported.
  * Windows installer: Defaults to 64-bit version on 64-bit Windows.
  * Various code changes suggested by Clang Static Analyser and Cppcheck.
- enable "--with-nvme-devicescan" option
- update smartmontools-drivedb.h file
- use --with-savestates, --with-attributelog, --docdir instead of old options</changelog>
<changelog author="sbrabec@suse.com" date="1482148800">- Drop systemd dependency on syslog.target (bsc#983938,
  smartmontools-systemd-no-syslog.patch).
  https://lists.opensuse.org/opensuse-packaging/2013-05/msg00102.html</changelog>

</package>
<package pkgid="ca5b665a427c2e1f9451ffcec076878251b8abeb0d0b03eca61e279aef297f84" name="smartmontools" arch="x86_64">
    <version epoch="0" ver="6.5" rel="8.1"/>

<changelog author="sbrabec@suse.cz" date="1353412800">- Re-introduce smartmontools-sysconfig.patch with
  SMARTD_SAVESTATES, SMARTD_ATTRLOG and SMARTD_EXTRA_OPTS sysconfig
  variables (bnc#790044).</changelog>
<changelog author="sbrabec@suse.cz" date="1354190400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1355313600">- Use sysconfig variables (sed on smartd.service.in) and generate
  smartd_opts for systemd smartd.service.
- Remove obsolete parsing of /etc/default/smartmontools
  (it is no more in upstream installation).</changelog>
<changelog author="sbrabec@suse.cz" date="1363608000">- Update to version 6.1:
  * smartctl -l improved.
  * smartctl -s/-g wcache and rcache for SCSI devices.
  * smartctl prints more info for ATA and SCSI devices.
  * smartctl '--identify' updated for latest ATA ACS-3 spec.
  * smartd runs /etc/smartd_warning.sh to generate warning emails.
  * smartd '-w PATH' option to specify this executable.
  * smartd '-d ignore' directive.
  * smartd DEVICESCAN ignores devices already specified.
  * smartd: added support for -s and -A for SCSI devices.
  * smartd '-W' directive uses ATA attribute 190 if 194 is missing.
  * Support of larger SCSI defect lists via READ DEFECT(12).
  * Device type '-d usbjmicron,p' for Prolific USB bridges.
  * Many HDD, SSD and USB additions to drive database.
  * Support for SAS disks behind Areca controllers.
  * Improved support for SATA disks on LSI/Megaraid controllers.
  * Disks on MegaRaid controllers are automatically scanned.
- smartmontools.keyring: New signing key for the next 2 years.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365076800">- remove all sysvinit support.</changelog>
<changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
<changelog author="sbrabec@suse.cz" date="1375099200">- Update to version 6.2:
  * smartctl: Added ATA write cache reordering control using
    '-g wcreorder' and '-s wcreorder,[on|off]' options.
  * update-smart-drivedb: Updated for new SVN repository.
  * HDD, SSD and USB additions to drive database.
  * Areca RAID support: Fixed possible segfault on empty port.
  * HPT RAID support: Maximum disk number increased to 128.</changelog>
<changelog author="sbrabec@suse.com" date="1386244800">- Add supplementary drivedb.h update script
  (smartmontools-drivedb_h-update.sh, bnc#851276).
- Skip drivedb.h verification by rpm -V (bnc#851276).
- Implement intelligent drivedb.h update not overwriting newer
  drivedb.h releases.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch trunk.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.</changelog>
<changelog author="ro@suse.de" date="1409745600">- update to version 6.3
  - smartctl: Fixed bogus error messages from '-g/-s wcreorder'.
  - smartctl prints ATA form factor.
  - SCSI: Improved support of modern disks (SAS SSDs).
  - SCSI: Fixed sense data noise from old disks.
  - update-smart-drivedb man page.
  - configure option '--with-smartdscriptdir'.
  - configure option '--with-smartdplugindir'.
  - configure option '--with-systemdenvfile'.
  - configure option '--with-working-snprintf'.
  - Removed build time stamps to support reproducible builds.
  - Compile fixes for C++11.
  - HDD, SSD and USB additions to drive database.
  - Linux: Support for controllers behind AACRAID driver.
  - Linux: Fixed DEVICESCAN max path count.
  - FreeBSD: Fixed possible crash caused by wrong SCSI error handling.
  - FreeBSD: Compile fix for kFreeBSD.
  - Windows: Reworked CSMI port scanning.
  - QNX: Compile fix.
- dropped patches:
  smartmontools-nobuild-date.patch (code removed upstream)</changelog>
<changelog author="ro@suse.de" date="1409745601">- re-add sysvinit support in specfile (fix build on sles11)</changelog>
<changelog author="sbrabec@suse.cz" date="1412683200">- Re-add /usr/sbin/rcsmards symlink (bnc#900099).
- Fix service restart in smartmontools.generate_smartd_opts.in
  (bnc#900099).</changelog>
<changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
<changelog author="sbrabec@suse.cz" date="1425384000">- Improve drivedb.h update scriptlets: Detect update across
  branches.
- Check state of smartmontools-drivedb.h in %prep.
- Add ghost records for files created by update-smart-drivedb.
- Improve smartmontools-drivedb_h-update.sh script: Perform spec
  file changess.
- Clean up on uninstall.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch RELEASE_6_3_DRIVEDB.</changelog>
<changelog author="sbrabec@suse.cz" date="1425902400">- Package empty /etc/smartd_warning.d for warning plugins.
- smartmontools-drivedb_h-update.sh: Fix default branch name.
- Comment fixes.</changelog>
<changelog author="sbrabec@suse.cz" date="1425988800">- Run Self Tests:
  * Short Self Test every night
  * Extended Self Test every month
  * Discussion:
    http://lists.opensuse.org/opensuse-factory/2015-03/msg00040.html
- Dropped smartmontools-removable.patch
- Created smartmontools-suse-default.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1452427200">- Update to version 6.0.4
  * Device type '  *d usbprolific' for Prolific PL2571/277x USB bridges.
  * SAT: Support for ATA registers returned in fixed format sense data.
  * smartctl '  *i' and '  *  *identify': ATA ACS  *4 and SATA 3.2 enhancements.
  * smartctl '  *l xerror': Support for logs with more than 255 pages.
  * smartctl '  *l devstat': Prints ACS  *3 DSN flags.
  * smartctl '  *l devstat': Read via SMART command if GP log is not
    available.
  * smartctl '  *l scttempsts': Prints SCT SMART STATUS (ACS  *4) and
    vendor specific SCT bytes.
  * configure option '  *  *with  *systemdenvfile=auto' as new default.
  * configure options '  *  *disable  *drivedb', '  *  *enable  *savestates'
    and '  *  *enable  *attributelog' are deprecated.
  * Corresponding '  *  *with  **' options are enhanced accordingly.
  * Configure option '  *  *with  *docdir' is deprecated.
  * autoconf &lt; 2.60 and automake &lt; 1.10 are deprecated.
    (all of the above still work but a warning is printed if used)
  * HDD, SSD and USB additions to drive database.
  * Linux: AACRAID fixes, SMART STATUS should work now.
  * Linux: '/dev/megaraid_sas_ioctl_node' fd leak fix.
  * Darwin: '  *S' command implemented, '  *l devstat' should work now.
  * Cygwin: Compile fix.
  * Windows: Device type '  *d aacraid' for AACRAID controllers.
  * Windows: SAT autodetection based on IOCTL_STORAGE_QUERY_PROPERTY.
  * Windows installer: Fix possible loss of user PATH environment variable.
- Update smartmontools-drivedb.h to the latest version from the
  upstream branch RELEASE_6_4_DRIVEDB.
- Cleanup and remove conditional macros; the package doesn't build
  for SLE anyway
- Remove smartmontools-default-enabled.patch; not needed anymore</changelog>
<changelog author="meissner@suse.com" date="1452772800">- replaced keyring with 2015/2016 key.
  pub   rsa2048/0xDF0F1A49C4A4903A 2014-12-31 [verfällt: 2016-12-31]
  Schl.-Fingerabdruck = F41F 01FC 0784 4958 4FFC  CF57 DF0F 1A49 C4A4 903A
  uid                [  unbekannt] Smartmontools Signing Key (through 2016) &lt;smartmontools-support@lists.sourceforge.net&gt;</changelog>
<changelog author="aginies@suse.com" date="1481112000">- update to 6.5 version
  * Experimental support for NVMe devices on FreeBSD, Linux and Windows.
  * smartctl '-i', '-c', '-H' and '-l error': NVMe support.
  * smartctl '-l nvmelog': New option for NVMe.
  * smartd.conf '-H', '-l error' and '-W': NVMe support.
  * Optional NVMe device scanning support on Linux and Windows.
  * configure option '--with-nvme-devicescan' to include NVMe in
  * default device scanning result.
  * Device scanning now allows to specify multiple '-d TYPE' options.
  * ATA: Added new POWER MODE values introduced in ATA ACS-2.
  * ATA: SCT commands are no longer issued if ATA Security is locked.
  * SCSI: LB provisioning improvements.
  * SCSI: Fixed GLTSD bit set/cleared info messages.
  * SCSI: Solid State media log page is no longer checked for tapes.
  * SCSI: Improved handling when no tape cartridge in drive.
  * SCSI: Workaround for buggy Seagate firmware.
  * SAT: Improved heuristics to detect bogus sense data from SAT layer.
  * smartd: Fixed crash on missing argument to '-s' directive.
    update-smart-drivedb: Now uses HTTPS for download by default.
  * update-smart-drivedb: New options to select URL and download tool.
  * update-smart-drivedb: New download tool 'svn'.
  * configure option '--without-update-smart-drivedb' to disable
    update-smart-drivedb script.
  * configure options '--disable-drivedb', '--enable-savestates',
    '--enable-attributelog' and '--with-docdir' are no longer supported.
  * autoconf &lt; 2.60 and automake &lt; 1.10 are no longer supported.
  * Drive database file now also includes the DEFAULT setting
    for each attribute.
  * HDD, SSD and USB additions to drive database.
  * Darwin: New support files for package installer.
  * New makefile target 'install-darwin' builds DMG image.
  * Solaris: Auto detection of SATA devices behind SAT layer.
  * Solaris SPARC: Legacy ATA support disabled by default.
    New configure option '--with-solaris-sparc-ata' enables it.
    File os_solaris_ata.s is no longer included in source tarball.
  * Windows: Auto detection of USB devices specified by drive letter.
  * Windows: Device scanning does no longer ignore unknown USB devices.
  * Windows: Prevent drive spin up by '-n standby' check.
  * Windows: New application manifests indicating Win 10 support.
  * Windows smartd: '-m [sys]msgbox' is no longer supported.
  * Windows installer: Defaults to 64-bit version on 64-bit Windows.
  * Various code changes suggested by Clang Static Analyser and Cppcheck.
- enable "--with-nvme-devicescan" option
- update smartmontools-drivedb.h file
- use --with-savestates, --with-attributelog, --docdir instead of old options</changelog>
<changelog author="sbrabec@suse.com" date="1482148800">- Drop systemd dependency on syslog.target (bsc#983938,
  smartmontools-systemd-no-syslog.patch).
  https://lists.opensuse.org/opensuse-packaging/2013-05/msg00102.html</changelog>

</package>
<package pkgid="812b76358966697ad70bfea1e52da25c82973428abaafb4c762cefe5678f4a3c" name="ucode-intel" arch="src">
    <version epoch="0" ver="20170707" rel="10.1"/>

<changelog author="trenn@suse.de" date="1385985600">- Add mkinitrd script to add Intel microcode to initrd.
  This is needed because microcode driver is built in or gets loaded
  automatically via udev early. Therefore the microcode has to be available
  in initrd already.
  This must not be mixed up with early micorcode loading. This feature will
  not be implemented via mkinitrd. Dracut is doing early microcode loading.
- bnc#847158
- mkinitrd scripts:
  - mkinitrd_setup-intel_microcode.sh
    Adding microcode to the initrd
  - mkinitrd_boot-intel_microcode.sh
    Triggering the reload at boot</changelog>
<changelog author="trenn@suse.de" date="1386676800">- Loading firmware needs udev to be running</changelog>
<changelog author="idonmez@suse.com" date="1392120000">- ucode 20140122, no changelog available.</changelog>
<changelog author="mmarek@suse.cz" date="1396612800">- Regenerate the initrd in %posttrans (fate#313506)</changelog>
<changelog author="trenn@suse.de" date="1399291200">- Update to Intel microcode version 20140430 (bnc#876073)</changelog>
<changelog author="trenn@suse.de" date="1402660800">- Delete mkinitrd scripts. This is done via %rpm regenerate_initrd_* macros
  (bnc#894160)</changelog>
<changelog author="tiwai@suse.de" date="1404302400">- Update to Intel microcode version 20140624 (bnc#885213)</changelog>
<changelog author="trenn@suse.de" date="1410955200">- Update to Intel microcode version 20140624 (bnc#896736, fate#317896)
  This microcode disables lock elision on CPUs which are known to
  not work reliable with this feature</changelog>
<changelog author="trenn@suse.de" date="1411128000">- Do not try to reload/update microcode at runtime after package
  installation. Only supported way of updating microcode is via
  early microcode update via initrd. bnc#896736</changelog>
<changelog author="mpluskal@suse.com" date="1421841600">- Pre require coreutils (bnc#914169).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1426766400">- Update to microcode 20150121.</changelog>
<changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
<changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
<changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
<changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
<changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
<changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
<changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>

</package>
<package pkgid="d709645da0a5453cbd1471aa812406b26aafa50e7652b7e6b1953a48dfb764ab" name="ucode-intel" arch="x86_64">
    <version epoch="0" ver="20170707" rel="10.1"/>

<changelog author="trenn@suse.de" date="1385985600">- Add mkinitrd script to add Intel microcode to initrd.
  This is needed because microcode driver is built in or gets loaded
  automatically via udev early. Therefore the microcode has to be available
  in initrd already.
  This must not be mixed up with early micorcode loading. This feature will
  not be implemented via mkinitrd. Dracut is doing early microcode loading.
- bnc#847158
- mkinitrd scripts:
  - mkinitrd_setup-intel_microcode.sh
    Adding microcode to the initrd
  - mkinitrd_boot-intel_microcode.sh
    Triggering the reload at boot</changelog>
<changelog author="trenn@suse.de" date="1386676800">- Loading firmware needs udev to be running</changelog>
<changelog author="idonmez@suse.com" date="1392120000">- ucode 20140122, no changelog available.</changelog>
<changelog author="mmarek@suse.cz" date="1396612800">- Regenerate the initrd in %posttrans (fate#313506)</changelog>
<changelog author="trenn@suse.de" date="1399291200">- Update to Intel microcode version 20140430 (bnc#876073)</changelog>
<changelog author="trenn@suse.de" date="1402660800">- Delete mkinitrd scripts. This is done via %rpm regenerate_initrd_* macros
  (bnc#894160)</changelog>
<changelog author="tiwai@suse.de" date="1404302400">- Update to Intel microcode version 20140624 (bnc#885213)</changelog>
<changelog author="trenn@suse.de" date="1410955200">- Update to Intel microcode version 20140624 (bnc#896736, fate#317896)
  This microcode disables lock elision on CPUs which are known to
  not work reliable with this feature</changelog>
<changelog author="trenn@suse.de" date="1411128000">- Do not try to reload/update microcode at runtime after package
  installation. Only supported way of updating microcode is via
  early microcode update via initrd. bnc#896736</changelog>
<changelog author="mpluskal@suse.com" date="1421841600">- Pre require coreutils (bnc#914169).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1426766400">- Update to microcode 20150121.</changelog>
<changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
<changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
<changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
<changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
<changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
<changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
<changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>

</package>
<package pkgid="05a86b9dd78e8817959201d06ab438988f87218310ee9509aacaf8a89ef444b4" name="ucode-intel-blob" arch="x86_64">
    <version epoch="0" ver="20170707" rel="10.1"/>

<changelog author="trenn@suse.de" date="1385985600">- Add mkinitrd script to add Intel microcode to initrd.
  This is needed because microcode driver is built in or gets loaded
  automatically via udev early. Therefore the microcode has to be available
  in initrd already.
  This must not be mixed up with early micorcode loading. This feature will
  not be implemented via mkinitrd. Dracut is doing early microcode loading.
- bnc#847158
- mkinitrd scripts:
  - mkinitrd_setup-intel_microcode.sh
    Adding microcode to the initrd
  - mkinitrd_boot-intel_microcode.sh
    Triggering the reload at boot</changelog>
<changelog author="trenn@suse.de" date="1386676800">- Loading firmware needs udev to be running</changelog>
<changelog author="idonmez@suse.com" date="1392120000">- ucode 20140122, no changelog available.</changelog>
<changelog author="mmarek@suse.cz" date="1396612800">- Regenerate the initrd in %posttrans (fate#313506)</changelog>
<changelog author="trenn@suse.de" date="1399291200">- Update to Intel microcode version 20140430 (bnc#876073)</changelog>
<changelog author="trenn@suse.de" date="1402660800">- Delete mkinitrd scripts. This is done via %rpm regenerate_initrd_* macros
  (bnc#894160)</changelog>
<changelog author="tiwai@suse.de" date="1404302400">- Update to Intel microcode version 20140624 (bnc#885213)</changelog>
<changelog author="trenn@suse.de" date="1410955200">- Update to Intel microcode version 20140624 (bnc#896736, fate#317896)
  This microcode disables lock elision on CPUs which are known to
  not work reliable with this feature</changelog>
<changelog author="trenn@suse.de" date="1411128000">- Do not try to reload/update microcode at runtime after package
  installation. Only supported way of updating microcode is via
  early microcode update via initrd. bnc#896736</changelog>
<changelog author="mpluskal@suse.com" date="1421841600">- Pre require coreutils (bnc#914169).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1426766400">- Update to microcode 20150121.</changelog>
<changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
<changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
<changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
<changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
<changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
<changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
<changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>

</package>
<package pkgid="0b1c70cdeac4b24e715f6299832a21457ea887327921eb0c401f66d4dcf329b5" name="virtualbox" arch="src">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="57d2a606c9731be1999e693eccc7156c59d18b32cc968bc1f33be303089052bb" name="virtualbox" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="17b5c70bc8da9db1b811981d2131eebcf4b134da0f43d6ec28d55eb2bba08a10" name="virtualbox-devel" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="aa7895bb986cccd8836ce6e2b5c61377affcfe5b5ee2a7a9c9bda62bc1f4dae3" name="virtualbox-guest-desktop-icons" arch="noarch">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="d8234aa396933b9f76dd676a0ceabd956bf481e9513738e9961a709d6c2f2b76" name="virtualbox-guest-kmp-default" arch="x86_64">
    <version epoch="0" ver="5.1.24_k4.4.76_1" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="e591b0548209042f548386c5fcd4ffa093cc3c3500f96e3c6a47f6aefa0db053" name="virtualbox-guest-source" arch="noarch">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="38b0e0a895cbeb239835c74130af22befbe41a32e13fc35b8bb7c8b753d5f33e" name="virtualbox-guest-tools" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="85857a6e39668c3ecdcc8ea70851b34d2441f96b06bc2f3992beb86ba25256c9" name="virtualbox-guest-x11" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="05fc98e88c71b9a2a2b0175715439f4bced342475dcbf737a9972140a197afe7" name="virtualbox-host-kmp-default" arch="x86_64">
    <version epoch="0" ver="5.1.24_k4.4.76_1" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="3fd5710e557842f021245a5d2298905aa75f410fc4799cf84dbdf088d22aa721" name="virtualbox-host-source" arch="noarch">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="29d6f593ad7ec70f7ee46786d597e05a2fa72475494c14eb510836cdcde43e6e" name="virtualbox-qt" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="7f5b628d0ac9e1ce8c1906dd062d247f0d96267293152358dea06b4e5e90b9e9" name="virtualbox-vnc" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="774329d8d6e7edae192a964aa3d90b0acac72a256fa6291a37538dfcf3733e10" name="virtualbox-websrv" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="1022a94e054c87d46bbccbd7c6f3299471135381ef0b5b3a962d3343144ae493" name="xorg-x11-server" arch="src">
    <version epoch="0" ver="7.6_1.18.3" rel="22.1"/>

<changelog author="eich@suse.com" date="1460462400">- n_Install-Avoid-failure-on-wrapper-installation.patch:
  Fix up build for wrapper.
- Place SUID wrapper into a separate package:
  xorg-x11-server-wrapper</changelog>
<changelog author="eich@suse.com" date="1460462401">-  n_Install-Avoid-failure-on-wrapper-installation.patch:
  rename to:
    N_Install-Avoid-failure-on-wrapper-installation.patch
-  u_xorg-wrapper-Drop-supplemental-group-IDs.patch:
  Drop supplementary group privileges.
-  u_xorg-wrapper-build-Build-position-independent-code.patch:
  Build position independent.</changelog>
<changelog author="eich@suse.com" date="1460462402">- Add permission verification for SUID wrapper
- Disable SUID wrapper per default until reviewed</changelog>
<changelog author="sndirsch@suse.com" date="1461931200">- removed no longer needed patch
  u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch, see
  https://lists.x.org/archives/xorg-devel/2016-April/049493.html for
  upstream discussion; obsoleted by upstream patch
  https://cgit.freedesktop.org/xorg/xserver/commit/?id=4962c8c08842d9d3ca66d254b1ce4cacc4fb3756, which is already in xorg-server 1.18.3</changelog>
<changelog author="sndirsch@suse.com" date="1462190400">- removed u_exa-only-draw-valid-trapezoids.patch; no longer needed
  since pixman 0.32.0</changelog>
<changelog author="eich@suse.com" date="1462708800">- modesetting.ids:
  Add file for PCI IDs of ASICs which the modesetting rather
  than the native driver should be used for.
  This includes all Intel Gen9+ hardware (boo#978954).</changelog>
<changelog author="eich@suse.com" date="1463400000">- Replace
  N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch
  by
  N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch
  Only disable HW cursor for cirrus and mgag200. This should fix
  a regression introduced by using modesetting for Intel gen9+
  (boo#980124).</changelog>
<changelog author="mstaudt@suse.com" date="1473422400">- U_glamor-Remove-the-FBO-cache.patch
  Fixes (bsc#983743) by not keeping &gt;1 GB of VRAM busy.</changelog>
<changelog author="msrb@suse.com" date="1479816000">- U_modesetting-set-driverPrivate-to-Null-after-closing-fd.patch
  Prevent crash when unplugging displaylink device. (bnc#1011570)</changelog>
<changelog author="mstaudt@suse.com" date="1481284800">- U_dri2-Sync-i965_pci_ids.h-from-mesa.patch
  Update Intel PCI IDs for modesetting to include Broxton 2x6.
  Fixes (boo#1011158).</changelog>
<changelog author="sndirsch@suse.com" date="1485777600">- U_glamor-Disable-logic-ops-when-doing-compositing-v4.patch
  * fix unpainted areas when glamor is being used (bnc#1022050)</changelog>
<changelog author="mstaudt@suse.com" date="1489579200">- U_glamor-Fix-missing-declaration-in-dash-vertex-shader.patch
  U_glamor-Fix-typo-vec2_pos-vec2-pos.patch
  Fix X server crash on drawing dashed lines (boo#1025985).</changelog>
<changelog author="mstaudt@suse.com" date="1489752000">- n_glamor-Always-draw-dashed-0-width-lines-in-software.patch
  Draw dashed lines in software, partly fixes (boo#1021803).</changelog>
<changelog author="mstaudt@suse.com" date="1490097600">- U_glamor-Fix-dashed-line-rendering.patch
  This replaces the last patch and fixes dashing in GLAMOR.</changelog>
<changelog author="mstaudt@suse.com" date="1490097601">- xorg-x11-server.spec: Re-add patches 701/702 removed by mistake.</changelog>
<changelog author="msrb@suse.com" date="1492689600">- U_xfree86-Add-IndirectGLX-server-flag.patch
  * Add IndirectGLX ServerFlags option to re-enable indirect GLX.
    (bnc#1032509)</changelog>
<changelog author="sndirsch@suse.com" date="1497096000">- U_Use-timingsafe_memcmp-to-compare-MIT-MAGIC-COOKIES-C.patch
  * Prevent timing attack against MIT cookie. (CVE-2017-2624, bnc#1025029)
- U_Use-arc4random_buf-3-if-available-to-generate-cookie.patch/
  U_Brown-bag-commit-to-fix-957e8d-arc4random_buf-suppor.patch
  * Use arc4random to generate cookies. (bnc#1025084)
- U_auth-remove-AuthToIDFunc-and-associated-functions.-N.patch
  * Remove unused function with use-after-free issue. (bnc#1025035)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- U_Xi-Do-not-try-to-swap-GenericEvent.patch,
  U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch,
  U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch,
  U_dix-Disallow-GenericEvent-in-SendEvent-request.patch
  * Fix security issues in event handling. (bnc#1035283,
    CVE-2017-10971, CVE-2017-10972)</changelog>
<changelog author="sndirsch@suse.com" date="1500033600">- u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
  If arc4random_buf() is not available for generating cookies:
  * use getentropy(), if available (which was only recently added to
    glibc)
  * use getrandom() via syscall(), if available (there was no glibc
    wrapper for this syscall for a long time)
  * if all else fails, directly read from /dev/urandom as before, but
    employ O_CLOEXEC, do an OsAbort() in case the random data couldn't be
    read to avoid unsecure situations. Don't know if that's too hard a
    measure but it shouldn't actually occur except on maximum number of
    FDs reached
  (bsc#1025084)</changelog>
<changelog author="msrb@suse.com" date="1500379200">- U_glamor-properly-handle-mask-formats-without-alpha.patch,
  U_glamor-preserve-gl_red-bits-in-r-channel-when-destination-is-gl_red.patch
  * Fix rendering with glamor acceleration. (bnc#1047154)</changelog>

</package>
<package pkgid="4c10d834dc06a65fb3276e8b6e6cdf8f7b56e4e21a1ac0879d2178b7ee232f5e" name="xorg-x11-server" arch="x86_64">
    <version epoch="0" ver="7.6_1.18.3" rel="22.1"/>

<changelog author="eich@suse.com" date="1460462400">- n_Install-Avoid-failure-on-wrapper-installation.patch:
  Fix up build for wrapper.
- Place SUID wrapper into a separate package:
  xorg-x11-server-wrapper</changelog>
<changelog author="eich@suse.com" date="1460462401">-  n_Install-Avoid-failure-on-wrapper-installation.patch:
  rename to:
    N_Install-Avoid-failure-on-wrapper-installation.patch
-  u_xorg-wrapper-Drop-supplemental-group-IDs.patch:
  Drop supplementary group privileges.
-  u_xorg-wrapper-build-Build-position-independent-code.patch:
  Build position independent.</changelog>
<changelog author="eich@suse.com" date="1460462402">- Add permission verification for SUID wrapper
- Disable SUID wrapper per default until reviewed</changelog>
<changelog author="sndirsch@suse.com" date="1461931200">- removed no longer needed patch
  u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch, see
  https://lists.x.org/archives/xorg-devel/2016-April/049493.html for
  upstream discussion; obsoleted by upstream patch
  https://cgit.freedesktop.org/xorg/xserver/commit/?id=4962c8c08842d9d3ca66d254b1ce4cacc4fb3756, which is already in xorg-server 1.18.3</changelog>
<changelog author="sndirsch@suse.com" date="1462190400">- removed u_exa-only-draw-valid-trapezoids.patch; no longer needed
  since pixman 0.32.0</changelog>
<changelog author="eich@suse.com" date="1462708800">- modesetting.ids:
  Add file for PCI IDs of ASICs which the modesetting rather
  than the native driver should be used for.
  This includes all Intel Gen9+ hardware (boo#978954).</changelog>
<changelog author="eich@suse.com" date="1463400000">- Replace
  N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch
  by
  N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch
  Only disable HW cursor for cirrus and mgag200. This should fix
  a regression introduced by using modesetting for Intel gen9+
  (boo#980124).</changelog>
<changelog author="mstaudt@suse.com" date="1473422400">- U_glamor-Remove-the-FBO-cache.patch
  Fixes (bsc#983743) by not keeping &gt;1 GB of VRAM busy.</changelog>
<changelog author="msrb@suse.com" date="1479816000">- U_modesetting-set-driverPrivate-to-Null-after-closing-fd.patch
  Prevent crash when unplugging displaylink device. (bnc#1011570)</changelog>
<changelog author="mstaudt@suse.com" date="1481284800">- U_dri2-Sync-i965_pci_ids.h-from-mesa.patch
  Update Intel PCI IDs for modesetting to include Broxton 2x6.
  Fixes (boo#1011158).</changelog>
<changelog author="sndirsch@suse.com" date="1485777600">- U_glamor-Disable-logic-ops-when-doing-compositing-v4.patch
  * fix unpainted areas when glamor is being used (bnc#1022050)</changelog>
<changelog author="mstaudt@suse.com" date="1489579200">- U_glamor-Fix-missing-declaration-in-dash-vertex-shader.patch
  U_glamor-Fix-typo-vec2_pos-vec2-pos.patch
  Fix X server crash on drawing dashed lines (boo#1025985).</changelog>
<changelog author="mstaudt@suse.com" date="1489752000">- n_glamor-Always-draw-dashed-0-width-lines-in-software.patch
  Draw dashed lines in software, partly fixes (boo#1021803).</changelog>
<changelog author="mstaudt@suse.com" date="1490097600">- U_glamor-Fix-dashed-line-rendering.patch
  This replaces the last patch and fixes dashing in GLAMOR.</changelog>
<changelog author="mstaudt@suse.com" date="1490097601">- xorg-x11-server.spec: Re-add patches 701/702 removed by mistake.</changelog>
<changelog author="msrb@suse.com" date="1492689600">- U_xfree86-Add-IndirectGLX-server-flag.patch
  * Add IndirectGLX ServerFlags option to re-enable indirect GLX.
    (bnc#1032509)</changelog>
<changelog author="sndirsch@suse.com" date="1497096000">- U_Use-timingsafe_memcmp-to-compare-MIT-MAGIC-COOKIES-C.patch
  * Prevent timing attack against MIT cookie. (CVE-2017-2624, bnc#1025029)
- U_Use-arc4random_buf-3-if-available-to-generate-cookie.patch/
  U_Brown-bag-commit-to-fix-957e8d-arc4random_buf-suppor.patch
  * Use arc4random to generate cookies. (bnc#1025084)
- U_auth-remove-AuthToIDFunc-and-associated-functions.-N.patch
  * Remove unused function with use-after-free issue. (bnc#1025035)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- U_Xi-Do-not-try-to-swap-GenericEvent.patch,
  U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch,
  U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch,
  U_dix-Disallow-GenericEvent-in-SendEvent-request.patch
  * Fix security issues in event handling. (bnc#1035283,
    CVE-2017-10971, CVE-2017-10972)</changelog>
<changelog author="sndirsch@suse.com" date="1500033600">- u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
  If arc4random_buf() is not available for generating cookies:
  * use getentropy(), if available (which was only recently added to
    glibc)
  * use getrandom() via syscall(), if available (there was no glibc
    wrapper for this syscall for a long time)
  * if all else fails, directly read from /dev/urandom as before, but
    employ O_CLOEXEC, do an OsAbort() in case the random data couldn't be
    read to avoid unsecure situations. Don't know if that's too hard a
    measure but it shouldn't actually occur except on maximum number of
    FDs reached
  (bsc#1025084)</changelog>
<changelog author="msrb@suse.com" date="1500379200">- U_glamor-properly-handle-mask-formats-without-alpha.patch,
  U_glamor-preserve-gl_red-bits-in-r-channel-when-destination-is-gl_red.patch
  * Fix rendering with glamor acceleration. (bnc#1047154)</changelog>

</package>
<package pkgid="f4de5251f231d3cb3c7adee8585a8a07b81dbc40e965bf3afee42921529a3087" name="xorg-x11-server-extra" arch="x86_64">
    <version epoch="0" ver="7.6_1.18.3" rel="22.1"/>

<changelog author="eich@suse.com" date="1460462400">- n_Install-Avoid-failure-on-wrapper-installation.patch:
  Fix up build for wrapper.
- Place SUID wrapper into a separate package:
  xorg-x11-server-wrapper</changelog>
<changelog author="eich@suse.com" date="1460462401">-  n_Install-Avoid-failure-on-wrapper-installation.patch:
  rename to:
    N_Install-Avoid-failure-on-wrapper-installation.patch
-  u_xorg-wrapper-Drop-supplemental-group-IDs.patch:
  Drop supplementary group privileges.
-  u_xorg-wrapper-build-Build-position-independent-code.patch:
  Build position independent.</changelog>
<changelog author="eich@suse.com" date="1460462402">- Add permission verification for SUID wrapper
- Disable SUID wrapper per default until reviewed</changelog>
<changelog author="sndirsch@suse.com" date="1461931200">- removed no longer needed patch
  u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch, see
  https://lists.x.org/archives/xorg-devel/2016-April/049493.html for
  upstream discussion; obsoleted by upstream patch
  https://cgit.freedesktop.org/xorg/xserver/commit/?id=4962c8c08842d9d3ca66d254b1ce4cacc4fb3756, which is already in xorg-server 1.18.3</changelog>
<changelog author="sndirsch@suse.com" date="1462190400">- removed u_exa-only-draw-valid-trapezoids.patch; no longer needed
  since pixman 0.32.0</changelog>
<changelog author="eich@suse.com" date="1462708800">- modesetting.ids:
  Add file for PCI IDs of ASICs which the modesetting rather
  than the native driver should be used for.
  This includes all Intel Gen9+ hardware (boo#978954).</changelog>
<changelog author="eich@suse.com" date="1463400000">- Replace
  N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch
  by
  N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch
  Only disable HW cursor for cirrus and mgag200. This should fix
  a regression introduced by using modesetting for Intel gen9+
  (boo#980124).</changelog>
<changelog author="mstaudt@suse.com" date="1473422400">- U_glamor-Remove-the-FBO-cache.patch
  Fixes (bsc#983743) by not keeping &gt;1 GB of VRAM busy.</changelog>
<changelog author="msrb@suse.com" date="1479816000">- U_modesetting-set-driverPrivate-to-Null-after-closing-fd.patch
  Prevent crash when unplugging displaylink device. (bnc#1011570)</changelog>
<changelog author="mstaudt@suse.com" date="1481284800">- U_dri2-Sync-i965_pci_ids.h-from-mesa.patch
  Update Intel PCI IDs for modesetting to include Broxton 2x6.
  Fixes (boo#1011158).</changelog>
<changelog author="sndirsch@suse.com" date="1485777600">- U_glamor-Disable-logic-ops-when-doing-compositing-v4.patch
  * fix unpainted areas when glamor is being used (bnc#1022050)</changelog>
<changelog author="mstaudt@suse.com" date="1489579200">- U_glamor-Fix-missing-declaration-in-dash-vertex-shader.patch
  U_glamor-Fix-typo-vec2_pos-vec2-pos.patch
  Fix X server crash on drawing dashed lines (boo#1025985).</changelog>
<changelog author="mstaudt@suse.com" date="1489752000">- n_glamor-Always-draw-dashed-0-width-lines-in-software.patch
  Draw dashed lines in software, partly fixes (boo#1021803).</changelog>
<changelog author="mstaudt@suse.com" date="1490097600">- U_glamor-Fix-dashed-line-rendering.patch
  This replaces the last patch and fixes dashing in GLAMOR.</changelog>
<changelog author="mstaudt@suse.com" date="1490097601">- xorg-x11-server.spec: Re-add patches 701/702 removed by mistake.</changelog>
<changelog author="msrb@suse.com" date="1492689600">- U_xfree86-Add-IndirectGLX-server-flag.patch
  * Add IndirectGLX ServerFlags option to re-enable indirect GLX.
    (bnc#1032509)</changelog>
<changelog author="sndirsch@suse.com" date="1497096000">- U_Use-timingsafe_memcmp-to-compare-MIT-MAGIC-COOKIES-C.patch
  * Prevent timing attack against MIT cookie. (CVE-2017-2624, bnc#1025029)
- U_Use-arc4random_buf-3-if-available-to-generate-cookie.patch/
  U_Brown-bag-commit-to-fix-957e8d-arc4random_buf-suppor.patch
  * Use arc4random to generate cookies. (bnc#1025084)
- U_auth-remove-AuthToIDFunc-and-associated-functions.-N.patch
  * Remove unused function with use-after-free issue. (bnc#1025035)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- U_Xi-Do-not-try-to-swap-GenericEvent.patch,
  U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch,
  U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch,
  U_dix-Disallow-GenericEvent-in-SendEvent-request.patch
  * Fix security issues in event handling. (bnc#1035283,
    CVE-2017-10971, CVE-2017-10972)</changelog>
<changelog author="sndirsch@suse.com" date="1500033600">- u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
  If arc4random_buf() is not available for generating cookies:
  * use getentropy(), if available (which was only recently added to
    glibc)
  * use getrandom() via syscall(), if available (there was no glibc
    wrapper for this syscall for a long time)
  * if all else fails, directly read from /dev/urandom as before, but
    employ O_CLOEXEC, do an OsAbort() in case the random data couldn't be
    read to avoid unsecure situations. Don't know if that's too hard a
    measure but it shouldn't actually occur except on maximum number of
    FDs reached
  (bsc#1025084)</changelog>
<changelog author="msrb@suse.com" date="1500379200">- U_glamor-properly-handle-mask-formats-without-alpha.patch,
  U_glamor-preserve-gl_red-bits-in-r-channel-when-destination-is-gl_red.patch
  * Fix rendering with glamor acceleration. (bnc#1047154)</changelog>

</package>
<package pkgid="eb76894f0116a21347541e7fc0d99790b0c2b03634f757c7231b5326a888da65" name="xorg-x11-server-sdk" arch="x86_64">
    <version epoch="0" ver="7.6_1.18.3" rel="22.1"/>

<changelog author="eich@suse.com" date="1460462400">- n_Install-Avoid-failure-on-wrapper-installation.patch:
  Fix up build for wrapper.
- Place SUID wrapper into a separate package:
  xorg-x11-server-wrapper</changelog>
<changelog author="eich@suse.com" date="1460462401">-  n_Install-Avoid-failure-on-wrapper-installation.patch:
  rename to:
    N_Install-Avoid-failure-on-wrapper-installation.patch
-  u_xorg-wrapper-Drop-supplemental-group-IDs.patch:
  Drop supplementary group privileges.
-  u_xorg-wrapper-build-Build-position-independent-code.patch:
  Build position independent.</changelog>
<changelog author="eich@suse.com" date="1460462402">- Add permission verification for SUID wrapper
- Disable SUID wrapper per default until reviewed</changelog>
<changelog author="sndirsch@suse.com" date="1461931200">- removed no longer needed patch
  u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch, see
  https://lists.x.org/archives/xorg-devel/2016-April/049493.html for
  upstream discussion; obsoleted by upstream patch
  https://cgit.freedesktop.org/xorg/xserver/commit/?id=4962c8c08842d9d3ca66d254b1ce4cacc4fb3756, which is already in xorg-server 1.18.3</changelog>
<changelog author="sndirsch@suse.com" date="1462190400">- removed u_exa-only-draw-valid-trapezoids.patch; no longer needed
  since pixman 0.32.0</changelog>
<changelog author="eich@suse.com" date="1462708800">- modesetting.ids:
  Add file for PCI IDs of ASICs which the modesetting rather
  than the native driver should be used for.
  This includes all Intel Gen9+ hardware (boo#978954).</changelog>
<changelog author="eich@suse.com" date="1463400000">- Replace
  N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch
  by
  N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch
  Only disable HW cursor for cirrus and mgag200. This should fix
  a regression introduced by using modesetting for Intel gen9+
  (boo#980124).</changelog>
<changelog author="mstaudt@suse.com" date="1473422400">- U_glamor-Remove-the-FBO-cache.patch
  Fixes (bsc#983743) by not keeping &gt;1 GB of VRAM busy.</changelog>
<changelog author="msrb@suse.com" date="1479816000">- U_modesetting-set-driverPrivate-to-Null-after-closing-fd.patch
  Prevent crash when unplugging displaylink device. (bnc#1011570)</changelog>
<changelog author="mstaudt@suse.com" date="1481284800">- U_dri2-Sync-i965_pci_ids.h-from-mesa.patch
  Update Intel PCI IDs for modesetting to include Broxton 2x6.
  Fixes (boo#1011158).</changelog>
<changelog author="sndirsch@suse.com" date="1485777600">- U_glamor-Disable-logic-ops-when-doing-compositing-v4.patch
  * fix unpainted areas when glamor is being used (bnc#1022050)</changelog>
<changelog author="mstaudt@suse.com" date="1489579200">- U_glamor-Fix-missing-declaration-in-dash-vertex-shader.patch
  U_glamor-Fix-typo-vec2_pos-vec2-pos.patch
  Fix X server crash on drawing dashed lines (boo#1025985).</changelog>
<changelog author="mstaudt@suse.com" date="1489752000">- n_glamor-Always-draw-dashed-0-width-lines-in-software.patch
  Draw dashed lines in software, partly fixes (boo#1021803).</changelog>
<changelog author="mstaudt@suse.com" date="1490097600">- U_glamor-Fix-dashed-line-rendering.patch
  This replaces the last patch and fixes dashing in GLAMOR.</changelog>
<changelog author="mstaudt@suse.com" date="1490097601">- xorg-x11-server.spec: Re-add patches 701/702 removed by mistake.</changelog>
<changelog author="msrb@suse.com" date="1492689600">- U_xfree86-Add-IndirectGLX-server-flag.patch
  * Add IndirectGLX ServerFlags option to re-enable indirect GLX.
    (bnc#1032509)</changelog>
<changelog author="sndirsch@suse.com" date="1497096000">- U_Use-timingsafe_memcmp-to-compare-MIT-MAGIC-COOKIES-C.patch
  * Prevent timing attack against MIT cookie. (CVE-2017-2624, bnc#1025029)
- U_Use-arc4random_buf-3-if-available-to-generate-cookie.patch/
  U_Brown-bag-commit-to-fix-957e8d-arc4random_buf-suppor.patch
  * Use arc4random to generate cookies. (bnc#1025084)
- U_auth-remove-AuthToIDFunc-and-associated-functions.-N.patch
  * Remove unused function with use-after-free issue. (bnc#1025035)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- U_Xi-Do-not-try-to-swap-GenericEvent.patch,
  U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch,
  U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch,
  U_dix-Disallow-GenericEvent-in-SendEvent-request.patch
  * Fix security issues in event handling. (bnc#1035283,
    CVE-2017-10971, CVE-2017-10972)</changelog>
<changelog author="sndirsch@suse.com" date="1500033600">- u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
  If arc4random_buf() is not available for generating cookies:
  * use getentropy(), if available (which was only recently added to
    glibc)
  * use getrandom() via syscall(), if available (there was no glibc
    wrapper for this syscall for a long time)
  * if all else fails, directly read from /dev/urandom as before, but
    employ O_CLOEXEC, do an OsAbort() in case the random data couldn't be
    read to avoid unsecure situations. Don't know if that's too hard a
    measure but it shouldn't actually occur except on maximum number of
    FDs reached
  (bsc#1025084)</changelog>
<changelog author="msrb@suse.com" date="1500379200">- U_glamor-properly-handle-mask-formats-without-alpha.patch,
  U_glamor-preserve-gl_red-bits-in-r-channel-when-destination-is-gl_red.patch
  * Fix rendering with glamor acceleration. (bnc#1047154)</changelog>

</package>
<package pkgid="620240d4f10ba0e7e506a4ef0453c25bc41760180884c8e60f09e7f1ae70bed2" name="xorg-x11-server-source" arch="x86_64">
    <version epoch="0" ver="7.6_1.18.3" rel="22.1"/>

<changelog author="eich@suse.com" date="1460462400">- n_Install-Avoid-failure-on-wrapper-installation.patch:
  Fix up build for wrapper.
- Place SUID wrapper into a separate package:
  xorg-x11-server-wrapper</changelog>
<changelog author="eich@suse.com" date="1460462401">-  n_Install-Avoid-failure-on-wrapper-installation.patch:
  rename to:
    N_Install-Avoid-failure-on-wrapper-installation.patch
-  u_xorg-wrapper-Drop-supplemental-group-IDs.patch:
  Drop supplementary group privileges.
-  u_xorg-wrapper-build-Build-position-independent-code.patch:
  Build position independent.</changelog>
<changelog author="eich@suse.com" date="1460462402">- Add permission verification for SUID wrapper
- Disable SUID wrapper per default until reviewed</changelog>
<changelog author="sndirsch@suse.com" date="1461931200">- removed no longer needed patch
  u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch, see
  https://lists.x.org/archives/xorg-devel/2016-April/049493.html for
  upstream discussion; obsoleted by upstream patch
  https://cgit.freedesktop.org/xorg/xserver/commit/?id=4962c8c08842d9d3ca66d254b1ce4cacc4fb3756, which is already in xorg-server 1.18.3</changelog>
<changelog author="sndirsch@suse.com" date="1462190400">- removed u_exa-only-draw-valid-trapezoids.patch; no longer needed
  since pixman 0.32.0</changelog>
<changelog author="eich@suse.com" date="1462708800">- modesetting.ids:
  Add file for PCI IDs of ASICs which the modesetting rather
  than the native driver should be used for.
  This includes all Intel Gen9+ hardware (boo#978954).</changelog>
<changelog author="eich@suse.com" date="1463400000">- Replace
  N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch
  by
  N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch
  Only disable HW cursor for cirrus and mgag200. This should fix
  a regression introduced by using modesetting for Intel gen9+
  (boo#980124).</changelog>
<changelog author="mstaudt@suse.com" date="1473422400">- U_glamor-Remove-the-FBO-cache.patch
  Fixes (bsc#983743) by not keeping &gt;1 GB of VRAM busy.</changelog>
<changelog author="msrb@suse.com" date="1479816000">- U_modesetting-set-driverPrivate-to-Null-after-closing-fd.patch
  Prevent crash when unplugging displaylink device. (bnc#1011570)</changelog>
<changelog author="mstaudt@suse.com" date="1481284800">- U_dri2-Sync-i965_pci_ids.h-from-mesa.patch
  Update Intel PCI IDs for modesetting to include Broxton 2x6.
  Fixes (boo#1011158).</changelog>
<changelog author="sndirsch@suse.com" date="1485777600">- U_glamor-Disable-logic-ops-when-doing-compositing-v4.patch
  * fix unpainted areas when glamor is being used (bnc#1022050)</changelog>
<changelog author="mstaudt@suse.com" date="1489579200">- U_glamor-Fix-missing-declaration-in-dash-vertex-shader.patch
  U_glamor-Fix-typo-vec2_pos-vec2-pos.patch
  Fix X server crash on drawing dashed lines (boo#1025985).</changelog>
<changelog author="mstaudt@suse.com" date="1489752000">- n_glamor-Always-draw-dashed-0-width-lines-in-software.patch
  Draw dashed lines in software, partly fixes (boo#1021803).</changelog>
<changelog author="mstaudt@suse.com" date="1490097600">- U_glamor-Fix-dashed-line-rendering.patch
  This replaces the last patch and fixes dashing in GLAMOR.</changelog>
<changelog author="mstaudt@suse.com" date="1490097601">- xorg-x11-server.spec: Re-add patches 701/702 removed by mistake.</changelog>
<changelog author="msrb@suse.com" date="1492689600">- U_xfree86-Add-IndirectGLX-server-flag.patch
  * Add IndirectGLX ServerFlags option to re-enable indirect GLX.
    (bnc#1032509)</changelog>
<changelog author="sndirsch@suse.com" date="1497096000">- U_Use-timingsafe_memcmp-to-compare-MIT-MAGIC-COOKIES-C.patch
  * Prevent timing attack against MIT cookie. (CVE-2017-2624, bnc#1025029)
- U_Use-arc4random_buf-3-if-available-to-generate-cookie.patch/
  U_Brown-bag-commit-to-fix-957e8d-arc4random_buf-suppor.patch
  * Use arc4random to generate cookies. (bnc#1025084)
- U_auth-remove-AuthToIDFunc-and-associated-functions.-N.patch
  * Remove unused function with use-after-free issue. (bnc#1025035)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- U_Xi-Do-not-try-to-swap-GenericEvent.patch,
  U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch,
  U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch,
  U_dix-Disallow-GenericEvent-in-SendEvent-request.patch
  * Fix security issues in event handling. (bnc#1035283,
    CVE-2017-10971, CVE-2017-10972)</changelog>
<changelog author="sndirsch@suse.com" date="1500033600">- u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
  If arc4random_buf() is not available for generating cookies:
  * use getentropy(), if available (which was only recently added to
    glibc)
  * use getrandom() via syscall(), if available (there was no glibc
    wrapper for this syscall for a long time)
  * if all else fails, directly read from /dev/urandom as before, but
    employ O_CLOEXEC, do an OsAbort() in case the random data couldn't be
    read to avoid unsecure situations. Don't know if that's too hard a
    measure but it shouldn't actually occur except on maximum number of
    FDs reached
  (bsc#1025084)</changelog>
<changelog author="msrb@suse.com" date="1500379200">- U_glamor-properly-handle-mask-formats-without-alpha.patch,
  U_glamor-preserve-gl_red-bits-in-r-channel-when-destination-is-gl_red.patch
  * Fix rendering with glamor acceleration. (bnc#1047154)</changelog>

</package>

<package pkgid="f11c5b2c49fc898fd0874d30ea62a69a139d4a22481527100d83c8a0df56619a" name="catdoc" arch="src">
    <version epoch="0" ver="0.95" rel="10.1"/>

<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1" date="1134216000">- Initial package.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1.2" date="1144497600">- Rebuild for Fedora Core 5.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94.2-1" date="1145793600">- Updated to release 0.94.2.</changelog>
<changelog author="John Pye &lt;john@curioussymbols.com&gt; 0.94.2-2" date="1185969600">- Fixing 'makeinstall' macro for SUSE.
- Fixing install of man page(s).</changelog>
<changelog author="Raymond Wooninck &lt;tittiatcoke@gmail.com&gt; - 0.94.2" date="1237204800">- Moved package to KDE:KDE4:Community to support Recoll</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381838400">- Update to 0.94.4
-  Changes since 0.94.3:
  * Remove extra ';' in src/xlsparse.c which turned for loop in
    xlsparse into a buffer overflow
-  Changes since 0.94.2:
  * Fix codepage bugs
  * Fix charset bug
  * Handle negative numbers on 64bit architectures
  * Fix Macintosh MS1904 date bug in xlsparse reported ubuntu</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384689600">- Added dont_build_xls2csv.patch: xls2csv is provided by two other
  packages, so we don't need it built
- Added install.patch, for honoring installroot variable</changelog>
<changelog author="astieger@suse.com" date="1496232000">- catdoc 0.95:
  * Fix various issues found during fuzzing which may lead to an
    application crash or have unspecified further impact when
    the user is tricked into opening specially crafted files
    bsc#919228
  * Replace charset tables with new ones, published by Unicode
    Consortium with more permissive license
  * Fix some incompatibilities with CLang
  * Fix lot of segfaults on incorrect or corrupted data
  * Use stdint int types throughout the code
- drop install.patch</changelog>
<changelog author="astieger@suse.com" date="1499688000">- CVE-2017-11110: Attackers may have used specially crafted files
  to cause a denial of service through a heap-based buffer under-
  flow and application crash, or have unspecified other impact.
  Add CVE-2017-11110.patch bsc#1047877</changelog>

</package>

<package pkgid="7d377b4dc51db3874b495ea4e45c9921add905af8427cbf324552ea177ba5126" name="catdoc" arch="x86_64">
    <version epoch="0" ver="0.95" rel="10.1"/>

<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1" date="1134216000">- Initial package.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1.2" date="1144497600">- Rebuild for Fedora Core 5.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94.2-1" date="1145793600">- Updated to release 0.94.2.</changelog>
<changelog author="John Pye &lt;john@curioussymbols.com&gt; 0.94.2-2" date="1185969600">- Fixing 'makeinstall' macro for SUSE.
- Fixing install of man page(s).</changelog>
<changelog author="Raymond Wooninck &lt;tittiatcoke@gmail.com&gt; - 0.94.2" date="1237204800">- Moved package to KDE:KDE4:Community to support Recoll</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381838400">- Update to 0.94.4
-  Changes since 0.94.3:
  * Remove extra ';' in src/xlsparse.c which turned for loop in
    xlsparse into a buffer overflow
-  Changes since 0.94.2:
  * Fix codepage bugs
  * Fix charset bug
  * Handle negative numbers on 64bit architectures
  * Fix Macintosh MS1904 date bug in xlsparse reported ubuntu</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384689600">- Added dont_build_xls2csv.patch: xls2csv is provided by two other
  packages, so we don't need it built
- Added install.patch, for honoring installroot variable</changelog>
<changelog author="astieger@suse.com" date="1496232000">- catdoc 0.95:
  * Fix various issues found during fuzzing which may lead to an
    application crash or have unspecified further impact when
    the user is tricked into opening specially crafted files
    bsc#919228
  * Replace charset tables with new ones, published by Unicode
    Consortium with more permissive license
  * Fix some incompatibilities with CLang
  * Fix lot of segfaults on incorrect or corrupted data
  * Use stdint int types throughout the code
- drop install.patch</changelog>
<changelog author="astieger@suse.com" date="1499688000">- CVE-2017-11110: Attackers may have used specially crafted files
  to cause a denial of service through a heap-based buffer under-
  flow and application crash, or have unspecified other impact.
  Add CVE-2017-11110.patch bsc#1047877</changelog>

</package>

<package pkgid="67b8774823cb228a45573bd21eb5bbed93f05fddc20aa84cb7c958b68d0ae921" name="gsoap" arch="src">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>

<package pkgid="40c66fecab0f0dd24c6b373bb76c7fb82a370f55aa0041f4a0dbb089c6cac1fe" name="gsoap-devel" arch="x86_64">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>

<package pkgid="48c50ce7d3edd367df2beaccf3e1a82bdd1cb74a45a0d8b6a91606b6906b2ff2" name="gsoap-doc" arch="noarch">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>

<package pkgid="65b61e75c8cf8ee7ccc52fe9e50904975a75cb48a42b257ea5f76ebc5e0bb182" name="jasper" arch="src">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>

<package pkgid="2de44eaeda47c2d02d9080fd7295415c0a05c030609f3fd59af80bba2b6f8eab" name="jasper" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>

<package pkgid="dd319d36be22f6cfdbf0fe66e34df5ae054039178316cd9202d96fab6aea69f3" name="libgsoap-2_8_46" arch="x86_64">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>

<package pkgid="bb30b743501202f66b034507e42ca172e539604bd030b7ef322d5d48b2d4c58e" name="libjasper-devel" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>

<package pkgid="bb3ed9a0b6206470d2ceb036b686de6d635fbe605e97a7f542efc8dbb4262d0f" name="libjasper1" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>

<package pkgid="b5f4e2da03bc2252709e4945f3a585702eb86d5c3ab3ab1044136bc9ef6f4a32" name="libjasper1-32bit" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>

<package pkgid="c589244c8bf6a9295467d3401f892668df73e5eb1acd3b78933656de3bcdc555" name="wireshark" arch="src">
    <version epoch="0" ver="2.2.8" rel="17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1449921600">- BuildRequire pkgconfig(Qt5Multimedia) too.</changelog>
<changelog author="astieger@suse.com" date="1451476800">- Wireshark 2.0.1
  fixing the following dissector crashes boo#960382:
  * NBAP dissector crashes.
    wnpa-sec-2015-31 CVE-2015-8711
  * NLM dissector crash.
    wnpa-sec-2015-37 CVE-2015-8718
  * BER dissector crash.
    wnpa-sec-2015-39 CVE-2015-8720
  * Zlib decompression crash.
    wnpa-sec-2015-40 CVE-2015-8721
  * SCTP dissector crash.
    wnpa-sec-2015-41 CVE-2015-8722
  * 802.11 decryption crash.
    wnpa-sec-2015-42 CVE-2015-8723 CVE-2015-8724
  * DIAMETER dissector crash.
    wnpa-sec-2015-43 CVE-2015-8725
  * VeriWave file parser crashes.
    wnpa-sec-2015-44 CVE-2015-8726
  * RSVP dissector crash.
    wnpa-sec-2015-45 CVE-2015-8727
  * ANSI A &amp; GSM A dissector crashes.
    wnpa-sec-2015-46 CVE-2015-8728
  * Ascend file parser crash.
    wnpa-sec-2015-47 CVE-2015-8729
  * NBAP dissector crash.
    npa-sec-2015-48 CVE-2015-8730
  * RSL dissector crash.
    wnpa-sec-2015-49 CVE-2015-8731
  * ZigBee ZCL dissector crash.
    wnpa-sec-2015-50 CVE-2015-8732
  * Sniffer file parser crash
    wnpa-sec-2015-51 CVE-2015-8733
  * NWP dissector crash.
    wnpa-sec-2015-52 CVE-2015-8734
  * BT ATT dissector crash.
    wnpa-sec-2015-53 CVE-2015-8735
  * MP2T file parser crash.
    wnpa-sec-2015-54 CVE-2015-8736
  * MP2T file parser crash.
    wnpa-sec-2015-55 CVE-2015-8737
  * S7COMM dissector crash.
    wnpa-sec-2015-56 CVE-2015-8738
  * IPMI dissector crash.
    wnpa-sec-2015-57 CVE-2015-8739
  * TDS dissector crash.
    wnpa-sec-2015-58 CVE-2015-8740
  * PPI dissector crash.
    wnpa-sec-2015-59 CVE-2015-8741
  * MS-WSP dissector crash.
    wnpa-sec-2015-60 CVE-2015-8742
- adjust wireshark-1.12.6-fix-QT-PIC-PIE.patch for upstream changes</changelog>
<changelog author="astieger@suse.com" date="1451908800">- Add CVEs for boo#960382</changelog>
<changelog author="astieger@suse.com" date="1455364800">- Recommend wireshark-ui instead of requiring it (boo#961170)
  to support text-only use</changelog>
<changelog author="astieger@suse.com" date="1456574400">- Wireshark 2.0.2 (boo#968565)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * CVE-2016-2522: ASN.1 BER dissector crash (wnpa-sec-2016-02)
  * CVE-2016-2523: DNP dissector infinite loop (wnpa-sec-2016-03)
  * CVE-2016-2524: X.509AF dissector crash (wnpa-sec-2016-04)
  * CVE-2016-2525: HTTP/2 dissector crash (wnpa-sec-2016-05)
  * CVE-2016-2526: HiQnet dissector crash (wnpa-sec-2016-06)
  * CVE-2016-2527: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)
  * CVE-2016-2528: LBMC dissector crash (wnpa-sec-2016-08)
  * CVE-2016-2529: iSeries file parser crash (wnpa-sec-2016-09)
  * CVE-2016-2530: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2531: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2532: LLRP dissector crash (wnpa-sec-2016-11)
  * Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)
  * IEEE 802.11 dissector crash (wnpa-sec-2016-13)
  * GSM A-bis OML dissector crash (wnpa-sec-2016-14)
  * ASN.1 BER dissector crash (wnpa-sec-2016-15)
  * SPICE dissector large loop  (wnpa-sec-2016-16)
  * NFS dissector crash (wnpa-sec-2016-17)
  * ASN.1 BER dissector crash (wnpa-sec-2016-18)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.2.html</changelog>
<changelog author="astieger@suse.com" date="1461412800">- Wireshark 2.0.3 (boo#976944)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The NCP dissector could crash (wnpa-sec-2016-19)
  * TShark could crash due to a packet reassembly bug (wnpa-sec-2016-20)
  * The IEEE 802.11 dissector could crash (wnpa-sec-2016-21)
  * The PKTC dissector could crash (wnpa-sec-2016-22)
  * The PKTC dissector could crash (wnpa-sec-2016-23)
  * The IAX2 dissector could go into an infinite loop (wnpa-sec-2016-24)
  * Wireshark and TShark could exhaust the stack (wnpa-sec-2016-25)
  * The GSM CBCH dissector could crash (wnpa-sec-2016-26)
  * MS-WSP dissector crash (wnpa-sec-2016-27)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</changelog>
<changelog author="astieger@suse.com" date="1465387200">- Wireshark 2.0.4 (boo#983671)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The SPOOLS dissector could go into an infinite loop
    wnpa-sec-2016-29 CVE-2016-5350
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-30 CVE-2016-5351
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-31 CVE-2016-5352
  * The UMTS FP dissector could crash
    wnpa-sec-2016-32 CVE-2016-5353
  * Some USB dissectors could crash
    wnpa-sec-2016-33 CVE-2016-5354
  * The Toshiba file parser could crash
    wnpa-sec-2016-34 CVE-2016-5355
  * The CoSine file parser could crash
    wnpa-sec-2016-35 CVE-2016-5356
  * The NetScreen file parser could crash
    wnpa-sec-2016-36 CVE-2016-5357
  * The Ethernet dissector could crash
    wnpa-sec-2016-37 CVE-2016-5358</changelog>
<changelog author="badshah400@gmail.com" date="1468584000">- Drop external wireshark.appdata.xml file, use the upstream
  bundled one instead.
- Use the bundled appdata file as a template to generate the
  proper appdata files for both the GTK and QT GUI applications;
  install separate appdata for both apps.</changelog>
<changelog author="astieger@suse.com" date="1469707200">- Wireshark 2.0.5:
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * PacketBB crash
    wnpa-sec-2016-41 bsc#991013 CVE-2016-6505
  * WSP infinite loop
    wnpa-sec-2016-42 bsc#991015 CVE-2016-6505
  * RLC long loop
    wnpa-sec-2016-44 bsc#991017 CVE-2016-6508
  * LDSS dissector crash
    wnpa-sec-2016-45 bsc#991018 CVE-2016-6509
  * RLC dissector crash
    wnpa-sec-2016-46 bsc#991019 CVE-2016-6510
  * OpenFlow long loop
    wnpa-sec-2016-47 bsc#991020 CVE-2016-6511
  * MMSE, WAP, WBXML, and WSP infinite loop
    wnpa-sec-2016-48 bsc#991021 CVE-2016-6512
  * WBXML crash
    wnpa-sec-2016-49 bsc#991022 CVE-2016-6513
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.5.html</changelog>
<changelog author="astieger@suse.com" date="1473076800">- fix permissions warning on appdata, does not need +x</changelog>
<changelog author="astieger@suse.com" date="1473422400">- Wireshark 2.0.6:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#998099)
  * The QNX6 QNET dissector could crash
    wnpa-sec-2016-50 CVE-2016-7175
  * The H.225 dissector could crash
    wnpa-sec-2016-51 CVE-2016-7176
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-52 CVE-2016-7177
  * The UMTS FP dissector could crash
    wnpa-sec-2016-53 CVE-2016-7178
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-54 CVE-2016-7179
  * The IPMI Trace dissector could crash
    wnpa-sec-2016-55 CVE-2016-7180
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html</changelog>
<changelog author="ecsos@opensuse.org" date="1473422401">- Wireshark 2.2.0:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.0.html
  * Drop wireshark-pkg-config.patch because code is now in upstream
  * Drop wireshark-1.12.6-fix-QT-PIC-PIE.patch because no more need
    for build. And create errors at build Tumbleweed.
  * Rebase wireshark-1.10.0-authors-pod2man.patch</changelog>
<changelog author="astieger@suse.com" date="1475668800">- Wireshark 2.2.1:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#1002981)
  * wnpa-sec-2016-56: The Bluetooth L2CAP dissector could crash
  * wnpa-sec-2016-57: The NCP dissector could crash
  * Further bug fixes and updated protocol support as listed in:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.1.html</changelog>
<changelog author="astieger@suse.com" date="1479384000">- Wireshark 2.2.2:
  * CVE-2016-9372: Profinet I/O long loop (boo#1010807)
  * CVE-2016-9374: AllJoyn crash (boo#1010752)
  * CVE-2016-9376: OpenFlow crash (boo#1010735)
  * CVE-2016-9373: DCERPC crash (boo#1010754)
  * CVE-2016-9375: DTN infinite loop (boo#1010740)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.2.html</changelog>
<changelog author="astieger@suse.com" date="1481716800">- Wireshark 2.2.3:
  * fix export related bugs
  * fix UI bugs
  * bugfix and corrections updates for dissectors
  * updated protocol support for BGP, BOOTP/DHCP, BTLE, DICOM,
    DOF, Echo, GTP, ICMP, Radiotap, RLC, RPC over RDMA, RTCP, SMB,
    TCP, UFTP4, and VXLAN</changelog>
<changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
<changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop</changelog>
<changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
<changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)
- add wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch
  to prevent compilation errors in QT</changelog>
<changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)
- drop wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch, is
  upstream</changelog>

</package>

<package pkgid="36d2e122d2f98ef7880b80b7b53c46b862902e6de632e6d159287b4dc6e54097" name="wireshark" arch="x86_64">
    <version epoch="0" ver="2.2.8" rel="17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1449921600">- BuildRequire pkgconfig(Qt5Multimedia) too.</changelog>
<changelog author="astieger@suse.com" date="1451476800">- Wireshark 2.0.1
  fixing the following dissector crashes boo#960382:
  * NBAP dissector crashes.
    wnpa-sec-2015-31 CVE-2015-8711
  * NLM dissector crash.
    wnpa-sec-2015-37 CVE-2015-8718
  * BER dissector crash.
    wnpa-sec-2015-39 CVE-2015-8720
  * Zlib decompression crash.
    wnpa-sec-2015-40 CVE-2015-8721
  * SCTP dissector crash.
    wnpa-sec-2015-41 CVE-2015-8722
  * 802.11 decryption crash.
    wnpa-sec-2015-42 CVE-2015-8723 CVE-2015-8724
  * DIAMETER dissector crash.
    wnpa-sec-2015-43 CVE-2015-8725
  * VeriWave file parser crashes.
    wnpa-sec-2015-44 CVE-2015-8726
  * RSVP dissector crash.
    wnpa-sec-2015-45 CVE-2015-8727
  * ANSI A &amp; GSM A dissector crashes.
    wnpa-sec-2015-46 CVE-2015-8728
  * Ascend file parser crash.
    wnpa-sec-2015-47 CVE-2015-8729
  * NBAP dissector crash.
    npa-sec-2015-48 CVE-2015-8730
  * RSL dissector crash.
    wnpa-sec-2015-49 CVE-2015-8731
  * ZigBee ZCL dissector crash.
    wnpa-sec-2015-50 CVE-2015-8732
  * Sniffer file parser crash
    wnpa-sec-2015-51 CVE-2015-8733
  * NWP dissector crash.
    wnpa-sec-2015-52 CVE-2015-8734
  * BT ATT dissector crash.
    wnpa-sec-2015-53 CVE-2015-8735
  * MP2T file parser crash.
    wnpa-sec-2015-54 CVE-2015-8736
  * MP2T file parser crash.
    wnpa-sec-2015-55 CVE-2015-8737
  * S7COMM dissector crash.
    wnpa-sec-2015-56 CVE-2015-8738
  * IPMI dissector crash.
    wnpa-sec-2015-57 CVE-2015-8739
  * TDS dissector crash.
    wnpa-sec-2015-58 CVE-2015-8740
  * PPI dissector crash.
    wnpa-sec-2015-59 CVE-2015-8741
  * MS-WSP dissector crash.
    wnpa-sec-2015-60 CVE-2015-8742
- adjust wireshark-1.12.6-fix-QT-PIC-PIE.patch for upstream changes</changelog>
<changelog author="astieger@suse.com" date="1451908800">- Add CVEs for boo#960382</changelog>
<changelog author="astieger@suse.com" date="1455364800">- Recommend wireshark-ui instead of requiring it (boo#961170)
  to support text-only use</changelog>
<changelog author="astieger@suse.com" date="1456574400">- Wireshark 2.0.2 (boo#968565)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * CVE-2016-2522: ASN.1 BER dissector crash (wnpa-sec-2016-02)
  * CVE-2016-2523: DNP dissector infinite loop (wnpa-sec-2016-03)
  * CVE-2016-2524: X.509AF dissector crash (wnpa-sec-2016-04)
  * CVE-2016-2525: HTTP/2 dissector crash (wnpa-sec-2016-05)
  * CVE-2016-2526: HiQnet dissector crash (wnpa-sec-2016-06)
  * CVE-2016-2527: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)
  * CVE-2016-2528: LBMC dissector crash (wnpa-sec-2016-08)
  * CVE-2016-2529: iSeries file parser crash (wnpa-sec-2016-09)
  * CVE-2016-2530: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2531: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2532: LLRP dissector crash (wnpa-sec-2016-11)
  * Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)
  * IEEE 802.11 dissector crash (wnpa-sec-2016-13)
  * GSM A-bis OML dissector crash (wnpa-sec-2016-14)
  * ASN.1 BER dissector crash (wnpa-sec-2016-15)
  * SPICE dissector large loop  (wnpa-sec-2016-16)
  * NFS dissector crash (wnpa-sec-2016-17)
  * ASN.1 BER dissector crash (wnpa-sec-2016-18)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.2.html</changelog>
<changelog author="astieger@suse.com" date="1461412800">- Wireshark 2.0.3 (boo#976944)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The NCP dissector could crash (wnpa-sec-2016-19)
  * TShark could crash due to a packet reassembly bug (wnpa-sec-2016-20)
  * The IEEE 802.11 dissector could crash (wnpa-sec-2016-21)
  * The PKTC dissector could crash (wnpa-sec-2016-22)
  * The PKTC dissector could crash (wnpa-sec-2016-23)
  * The IAX2 dissector could go into an infinite loop (wnpa-sec-2016-24)
  * Wireshark and TShark could exhaust the stack (wnpa-sec-2016-25)
  * The GSM CBCH dissector could crash (wnpa-sec-2016-26)
  * MS-WSP dissector crash (wnpa-sec-2016-27)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</changelog>
<changelog author="astieger@suse.com" date="1465387200">- Wireshark 2.0.4 (boo#983671)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The SPOOLS dissector could go into an infinite loop
    wnpa-sec-2016-29 CVE-2016-5350
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-30 CVE-2016-5351
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-31 CVE-2016-5352
  * The UMTS FP dissector could crash
    wnpa-sec-2016-32 CVE-2016-5353
  * Some USB dissectors could crash
    wnpa-sec-2016-33 CVE-2016-5354
  * The Toshiba file parser could crash
    wnpa-sec-2016-34 CVE-2016-5355
  * The CoSine file parser could crash
    wnpa-sec-2016-35 CVE-2016-5356
  * The NetScreen file parser could crash
    wnpa-sec-2016-36 CVE-2016-5357
  * The Ethernet dissector could crash
    wnpa-sec-2016-37 CVE-2016-5358</changelog>
<changelog author="badshah400@gmail.com" date="1468584000">- Drop external wireshark.appdata.xml file, use the upstream
  bundled one instead.
- Use the bundled appdata file as a template to generate the
  proper appdata files for both the GTK and QT GUI applications;
  install separate appdata for both apps.</changelog>
<changelog author="astieger@suse.com" date="1469707200">- Wireshark 2.0.5:
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * PacketBB crash
    wnpa-sec-2016-41 bsc#991013 CVE-2016-6505
  * WSP infinite loop
    wnpa-sec-2016-42 bsc#991015 CVE-2016-6505
  * RLC long loop
    wnpa-sec-2016-44 bsc#991017 CVE-2016-6508
  * LDSS dissector crash
    wnpa-sec-2016-45 bsc#991018 CVE-2016-6509
  * RLC dissector crash
    wnpa-sec-2016-46 bsc#991019 CVE-2016-6510
  * OpenFlow long loop
    wnpa-sec-2016-47 bsc#991020 CVE-2016-6511
  * MMSE, WAP, WBXML, and WSP infinite loop
    wnpa-sec-2016-48 bsc#991021 CVE-2016-6512
  * WBXML crash
    wnpa-sec-2016-49 bsc#991022 CVE-2016-6513
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.5.html</changelog>
<changelog author="astieger@suse.com" date="1473076800">- fix permissions warning on appdata, does not need +x</changelog>
<changelog author="astieger@suse.com" date="1473422400">- Wireshark 2.0.6:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#998099)
  * The QNX6 QNET dissector could crash
    wnpa-sec-2016-50 CVE-2016-7175
  * The H.225 dissector could crash
    wnpa-sec-2016-51 CVE-2016-7176
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-52 CVE-2016-7177
  * The UMTS FP dissector could crash
    wnpa-sec-2016-53 CVE-2016-7178
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-54 CVE-2016-7179
  * The IPMI Trace dissector could crash
    wnpa-sec-2016-55 CVE-2016-7180
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html</changelog>
<changelog author="ecsos@opensuse.org" date="1473422401">- Wireshark 2.2.0:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.0.html
  * Drop wireshark-pkg-config.patch because code is now in upstream
  * Drop wireshark-1.12.6-fix-QT-PIC-PIE.patch because no more need
    for build. And create errors at build Tumbleweed.
  * Rebase wireshark-1.10.0-authors-pod2man.patch</changelog>
<changelog author="astieger@suse.com" date="1475668800">- Wireshark 2.2.1:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#1002981)
  * wnpa-sec-2016-56: The Bluetooth L2CAP dissector could crash
  * wnpa-sec-2016-57: The NCP dissector could crash
  * Further bug fixes and updated protocol support as listed in:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.1.html</changelog>
<changelog author="astieger@suse.com" date="1479384000">- Wireshark 2.2.2:
  * CVE-2016-9372: Profinet I/O long loop (boo#1010807)
  * CVE-2016-9374: AllJoyn crash (boo#1010752)
  * CVE-2016-9376: OpenFlow crash (boo#1010735)
  * CVE-2016-9373: DCERPC crash (boo#1010754)
  * CVE-2016-9375: DTN infinite loop (boo#1010740)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.2.html</changelog>
<changelog author="astieger@suse.com" date="1481716800">- Wireshark 2.2.3:
  * fix export related bugs
  * fix UI bugs
  * bugfix and corrections updates for dissectors
  * updated protocol support for BGP, BOOTP/DHCP, BTLE, DICOM,
    DOF, Echo, GTP, ICMP, Radiotap, RLC, RPC over RDMA, RTCP, SMB,
    TCP, UFTP4, and VXLAN</changelog>
<changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
<changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop</changelog>
<changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
<changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)
- add wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch
  to prevent compilation errors in QT</changelog>
<changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)
- drop wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch, is
  upstream</changelog>

</package>

<package pkgid="632cbdf8c6dca8ef6a53c5e196733d404ec0c358fbdbf16373e142dd25b9359b" name="wireshark-devel" arch="x86_64">
    <version epoch="0" ver="2.2.8" rel="17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1449921600">- BuildRequire pkgconfig(Qt5Multimedia) too.</changelog>
<changelog author="astieger@suse.com" date="1451476800">- Wireshark 2.0.1
  fixing the following dissector crashes boo#960382:
  * NBAP dissector crashes.
    wnpa-sec-2015-31 CVE-2015-8711
  * NLM dissector crash.
    wnpa-sec-2015-37 CVE-2015-8718
  * BER dissector crash.
    wnpa-sec-2015-39 CVE-2015-8720
  * Zlib decompression crash.
    wnpa-sec-2015-40 CVE-2015-8721
  * SCTP dissector crash.
    wnpa-sec-2015-41 CVE-2015-8722
  * 802.11 decryption crash.
    wnpa-sec-2015-42 CVE-2015-8723 CVE-2015-8724
  * DIAMETER dissector crash.
    wnpa-sec-2015-43 CVE-2015-8725
  * VeriWave file parser crashes.
    wnpa-sec-2015-44 CVE-2015-8726
  * RSVP dissector crash.
    wnpa-sec-2015-45 CVE-2015-8727
  * ANSI A &amp; GSM A dissector crashes.
    wnpa-sec-2015-46 CVE-2015-8728
  * Ascend file parser crash.
    wnpa-sec-2015-47 CVE-2015-8729
  * NBAP dissector crash.
    npa-sec-2015-48 CVE-2015-8730
  * RSL dissector crash.
    wnpa-sec-2015-49 CVE-2015-8731
  * ZigBee ZCL dissector crash.
    wnpa-sec-2015-50 CVE-2015-8732
  * Sniffer file parser crash
    wnpa-sec-2015-51 CVE-2015-8733
  * NWP dissector crash.
    wnpa-sec-2015-52 CVE-2015-8734
  * BT ATT dissector crash.
    wnpa-sec-2015-53 CVE-2015-8735
  * MP2T file parser crash.
    wnpa-sec-2015-54 CVE-2015-8736
  * MP2T file parser crash.
    wnpa-sec-2015-55 CVE-2015-8737
  * S7COMM dissector crash.
    wnpa-sec-2015-56 CVE-2015-8738
  * IPMI dissector crash.
    wnpa-sec-2015-57 CVE-2015-8739
  * TDS dissector crash.
    wnpa-sec-2015-58 CVE-2015-8740
  * PPI dissector crash.
    wnpa-sec-2015-59 CVE-2015-8741
  * MS-WSP dissector crash.
    wnpa-sec-2015-60 CVE-2015-8742
- adjust wireshark-1.12.6-fix-QT-PIC-PIE.patch for upstream changes</changelog>
<changelog author="astieger@suse.com" date="1451908800">- Add CVEs for boo#960382</changelog>
<changelog author="astieger@suse.com" date="1455364800">- Recommend wireshark-ui instead of requiring it (boo#961170)
  to support text-only use</changelog>
<changelog author="astieger@suse.com" date="1456574400">- Wireshark 2.0.2 (boo#968565)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * CVE-2016-2522: ASN.1 BER dissector crash (wnpa-sec-2016-02)
  * CVE-2016-2523: DNP dissector infinite loop (wnpa-sec-2016-03)
  * CVE-2016-2524: X.509AF dissector crash (wnpa-sec-2016-04)
  * CVE-2016-2525: HTTP/2 dissector crash (wnpa-sec-2016-05)
  * CVE-2016-2526: HiQnet dissector crash (wnpa-sec-2016-06)
  * CVE-2016-2527: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)
  * CVE-2016-2528: LBMC dissector crash (wnpa-sec-2016-08)
  * CVE-2016-2529: iSeries file parser crash (wnpa-sec-2016-09)
  * CVE-2016-2530: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2531: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2532: LLRP dissector crash (wnpa-sec-2016-11)
  * Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)
  * IEEE 802.11 dissector crash (wnpa-sec-2016-13)
  * GSM A-bis OML dissector crash (wnpa-sec-2016-14)
  * ASN.1 BER dissector crash (wnpa-sec-2016-15)
  * SPICE dissector large loop  (wnpa-sec-2016-16)
  * NFS dissector crash (wnpa-sec-2016-17)
  * ASN.1 BER dissector crash (wnpa-sec-2016-18)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.2.html</changelog>
<changelog author="astieger@suse.com" date="1461412800">- Wireshark 2.0.3 (boo#976944)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The NCP dissector could crash (wnpa-sec-2016-19)
  * TShark could crash due to a packet reassembly bug (wnpa-sec-2016-20)
  * The IEEE 802.11 dissector could crash (wnpa-sec-2016-21)
  * The PKTC dissector could crash (wnpa-sec-2016-22)
  * The PKTC dissector could crash (wnpa-sec-2016-23)
  * The IAX2 dissector could go into an infinite loop (wnpa-sec-2016-24)
  * Wireshark and TShark could exhaust the stack (wnpa-sec-2016-25)
  * The GSM CBCH dissector could crash (wnpa-sec-2016-26)
  * MS-WSP dissector crash (wnpa-sec-2016-27)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</changelog>
<changelog author="astieger@suse.com" date="1465387200">- Wireshark 2.0.4 (boo#983671)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The SPOOLS dissector could go into an infinite loop
    wnpa-sec-2016-29 CVE-2016-5350
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-30 CVE-2016-5351
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-31 CVE-2016-5352
  * The UMTS FP dissector could crash
    wnpa-sec-2016-32 CVE-2016-5353
  * Some USB dissectors could crash
    wnpa-sec-2016-33 CVE-2016-5354
  * The Toshiba file parser could crash
    wnpa-sec-2016-34 CVE-2016-5355
  * The CoSine file parser could crash
    wnpa-sec-2016-35 CVE-2016-5356
  * The NetScreen file parser could crash
    wnpa-sec-2016-36 CVE-2016-5357
  * The Ethernet dissector could crash
    wnpa-sec-2016-37 CVE-2016-5358</changelog>
<changelog author="badshah400@gmail.com" date="1468584000">- Drop external wireshark.appdata.xml file, use the upstream
  bundled one instead.
- Use the bundled appdata file as a template to generate the
  proper appdata files for both the GTK and QT GUI applications;
  install separate appdata for both apps.</changelog>
<changelog author="astieger@suse.com" date="1469707200">- Wireshark 2.0.5:
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * PacketBB crash
    wnpa-sec-2016-41 bsc#991013 CVE-2016-6505
  * WSP infinite loop
    wnpa-sec-2016-42 bsc#991015 CVE-2016-6505
  * RLC long loop
    wnpa-sec-2016-44 bsc#991017 CVE-2016-6508
  * LDSS dissector crash
    wnpa-sec-2016-45 bsc#991018 CVE-2016-6509
  * RLC dissector crash
    wnpa-sec-2016-46 bsc#991019 CVE-2016-6510
  * OpenFlow long loop
    wnpa-sec-2016-47 bsc#991020 CVE-2016-6511
  * MMSE, WAP, WBXML, and WSP infinite loop
    wnpa-sec-2016-48 bsc#991021 CVE-2016-6512
  * WBXML crash
    wnpa-sec-2016-49 bsc#991022 CVE-2016-6513
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.5.html</changelog>
<changelog author="astieger@suse.com" date="1473076800">- fix permissions warning on appdata, does not need +x</changelog>
<changelog author="astieger@suse.com" date="1473422400">- Wireshark 2.0.6:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#998099)
  * The QNX6 QNET dissector could crash
    wnpa-sec-2016-50 CVE-2016-7175
  * The H.225 dissector could crash
    wnpa-sec-2016-51 CVE-2016-7176
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-52 CVE-2016-7177
  * The UMTS FP dissector could crash
    wnpa-sec-2016-53 CVE-2016-7178
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-54 CVE-2016-7179
  * The IPMI Trace dissector could crash
    wnpa-sec-2016-55 CVE-2016-7180
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html</changelog>
<changelog author="ecsos@opensuse.org" date="1473422401">- Wireshark 2.2.0:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.0.html
  * Drop wireshark-pkg-config.patch because code is now in upstream
  * Drop wireshark-1.12.6-fix-QT-PIC-PIE.patch because no more need
    for build. And create errors at build Tumbleweed.
  * Rebase wireshark-1.10.0-authors-pod2man.patch</changelog>
<changelog author="astieger@suse.com" date="1475668800">- Wireshark 2.2.1:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#1002981)
  * wnpa-sec-2016-56: The Bluetooth L2CAP dissector could crash
  * wnpa-sec-2016-57: The NCP dissector could crash
  * Further bug fixes and updated protocol support as listed in:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.1.html</changelog>
<changelog author="astieger@suse.com" date="1479384000">- Wireshark 2.2.2:
  * CVE-2016-9372: Profinet I/O long loop (boo#1010807)
  * CVE-2016-9374: AllJoyn crash (boo#1010752)
  * CVE-2016-9376: OpenFlow crash (boo#1010735)
  * CVE-2016-9373: DCERPC crash (boo#1010754)
  * CVE-2016-9375: DTN infinite loop (boo#1010740)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.2.html</changelog>
<changelog author="astieger@suse.com" date="1481716800">- Wireshark 2.2.3:
  * fix export related bugs
  * fix UI bugs
  * bugfix and corrections updates for dissectors
  * updated protocol support for BGP, BOOTP/DHCP, BTLE, DICOM,
    DOF, Echo, GTP, ICMP, Radiotap, RLC, RPC over RDMA, RTCP, SMB,
    TCP, UFTP4, and VXLAN</changelog>
<changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
<changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop</changelog>
<changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
<changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)
- add wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch
  to prevent compilation errors in QT</changelog>
<changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)
- drop wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch, is
  upstream</changelog>

</package>

<package pkgid="0c7549f3023661f44489a122dc669387ff353d9f21e0904c7aa029e1f9585664" name="wireshark-ui-gtk" arch="x86_64">
    <version epoch="0" ver="2.2.8" rel="17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1449921600">- BuildRequire pkgconfig(Qt5Multimedia) too.</changelog>
<changelog author="astieger@suse.com" date="1451476800">- Wireshark 2.0.1
  fixing the following dissector crashes boo#960382:
  * NBAP dissector crashes.
    wnpa-sec-2015-31 CVE-2015-8711
  * NLM dissector crash.
    wnpa-sec-2015-37 CVE-2015-8718
  * BER dissector crash.
    wnpa-sec-2015-39 CVE-2015-8720
  * Zlib decompression crash.
    wnpa-sec-2015-40 CVE-2015-8721
  * SCTP dissector crash.
    wnpa-sec-2015-41 CVE-2015-8722
  * 802.11 decryption crash.
    wnpa-sec-2015-42 CVE-2015-8723 CVE-2015-8724
  * DIAMETER dissector crash.
    wnpa-sec-2015-43 CVE-2015-8725
  * VeriWave file parser crashes.
    wnpa-sec-2015-44 CVE-2015-8726
  * RSVP dissector crash.
    wnpa-sec-2015-45 CVE-2015-8727
  * ANSI A &amp; GSM A dissector crashes.
    wnpa-sec-2015-46 CVE-2015-8728
  * Ascend file parser crash.
    wnpa-sec-2015-47 CVE-2015-8729
  * NBAP dissector crash.
    npa-sec-2015-48 CVE-2015-8730
  * RSL dissector crash.
    wnpa-sec-2015-49 CVE-2015-8731
  * ZigBee ZCL dissector crash.
    wnpa-sec-2015-50 CVE-2015-8732
  * Sniffer file parser crash
    wnpa-sec-2015-51 CVE-2015-8733
  * NWP dissector crash.
    wnpa-sec-2015-52 CVE-2015-8734
  * BT ATT dissector crash.
    wnpa-sec-2015-53 CVE-2015-8735
  * MP2T file parser crash.
    wnpa-sec-2015-54 CVE-2015-8736
  * MP2T file parser crash.
    wnpa-sec-2015-55 CVE-2015-8737
  * S7COMM dissector crash.
    wnpa-sec-2015-56 CVE-2015-8738
  * IPMI dissector crash.
    wnpa-sec-2015-57 CVE-2015-8739
  * TDS dissector crash.
    wnpa-sec-2015-58 CVE-2015-8740
  * PPI dissector crash.
    wnpa-sec-2015-59 CVE-2015-8741
  * MS-WSP dissector crash.
    wnpa-sec-2015-60 CVE-2015-8742
- adjust wireshark-1.12.6-fix-QT-PIC-PIE.patch for upstream changes</changelog>
<changelog author="astieger@suse.com" date="1451908800">- Add CVEs for boo#960382</changelog>
<changelog author="astieger@suse.com" date="1455364800">- Recommend wireshark-ui instead of requiring it (boo#961170)
  to support text-only use</changelog>
<changelog author="astieger@suse.com" date="1456574400">- Wireshark 2.0.2 (boo#968565)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * CVE-2016-2522: ASN.1 BER dissector crash (wnpa-sec-2016-02)
  * CVE-2016-2523: DNP dissector infinite loop (wnpa-sec-2016-03)
  * CVE-2016-2524: X.509AF dissector crash (wnpa-sec-2016-04)
  * CVE-2016-2525: HTTP/2 dissector crash (wnpa-sec-2016-05)
  * CVE-2016-2526: HiQnet dissector crash (wnpa-sec-2016-06)
  * CVE-2016-2527: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)
  * CVE-2016-2528: LBMC dissector crash (wnpa-sec-2016-08)
  * CVE-2016-2529: iSeries file parser crash (wnpa-sec-2016-09)
  * CVE-2016-2530: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2531: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2532: LLRP dissector crash (wnpa-sec-2016-11)
  * Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)
  * IEEE 802.11 dissector crash (wnpa-sec-2016-13)
  * GSM A-bis OML dissector crash (wnpa-sec-2016-14)
  * ASN.1 BER dissector crash (wnpa-sec-2016-15)
  * SPICE dissector large loop  (wnpa-sec-2016-16)
  * NFS dissector crash (wnpa-sec-2016-17)
  * ASN.1 BER dissector crash (wnpa-sec-2016-18)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.2.html</changelog>
<changelog author="astieger@suse.com" date="1461412800">- Wireshark 2.0.3 (boo#976944)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The NCP dissector could crash (wnpa-sec-2016-19)
  * TShark could crash due to a packet reassembly bug (wnpa-sec-2016-20)
  * The IEEE 802.11 dissector could crash (wnpa-sec-2016-21)
  * The PKTC dissector could crash (wnpa-sec-2016-22)
  * The PKTC dissector could crash (wnpa-sec-2016-23)
  * The IAX2 dissector could go into an infinite loop (wnpa-sec-2016-24)
  * Wireshark and TShark could exhaust the stack (wnpa-sec-2016-25)
  * The GSM CBCH dissector could crash (wnpa-sec-2016-26)
  * MS-WSP dissector crash (wnpa-sec-2016-27)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</changelog>
<changelog author="astieger@suse.com" date="1465387200">- Wireshark 2.0.4 (boo#983671)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The SPOOLS dissector could go into an infinite loop
    wnpa-sec-2016-29 CVE-2016-5350
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-30 CVE-2016-5351
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-31 CVE-2016-5352
  * The UMTS FP dissector could crash
    wnpa-sec-2016-32 CVE-2016-5353
  * Some USB dissectors could crash
    wnpa-sec-2016-33 CVE-2016-5354
  * The Toshiba file parser could crash
    wnpa-sec-2016-34 CVE-2016-5355
  * The CoSine file parser could crash
    wnpa-sec-2016-35 CVE-2016-5356
  * The NetScreen file parser could crash
    wnpa-sec-2016-36 CVE-2016-5357
  * The Ethernet dissector could crash
    wnpa-sec-2016-37 CVE-2016-5358</changelog>
<changelog author="badshah400@gmail.com" date="1468584000">- Drop external wireshark.appdata.xml file, use the upstream
  bundled one instead.
- Use the bundled appdata file as a template to generate the
  proper appdata files for both the GTK and QT GUI applications;
  install separate appdata for both apps.</changelog>
<changelog author="astieger@suse.com" date="1469707200">- Wireshark 2.0.5:
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * PacketBB crash
    wnpa-sec-2016-41 bsc#991013 CVE-2016-6505
  * WSP infinite loop
    wnpa-sec-2016-42 bsc#991015 CVE-2016-6505
  * RLC long loop
    wnpa-sec-2016-44 bsc#991017 CVE-2016-6508
  * LDSS dissector crash
    wnpa-sec-2016-45 bsc#991018 CVE-2016-6509
  * RLC dissector crash
    wnpa-sec-2016-46 bsc#991019 CVE-2016-6510
  * OpenFlow long loop
    wnpa-sec-2016-47 bsc#991020 CVE-2016-6511
  * MMSE, WAP, WBXML, and WSP infinite loop
    wnpa-sec-2016-48 bsc#991021 CVE-2016-6512
  * WBXML crash
    wnpa-sec-2016-49 bsc#991022 CVE-2016-6513
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.5.html</changelog>
<changelog author="astieger@suse.com" date="1473076800">- fix permissions warning on appdata, does not need +x</changelog>
<changelog author="astieger@suse.com" date="1473422400">- Wireshark 2.0.6:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#998099)
  * The QNX6 QNET dissector could crash
    wnpa-sec-2016-50 CVE-2016-7175
  * The H.225 dissector could crash
    wnpa-sec-2016-51 CVE-2016-7176
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-52 CVE-2016-7177
  * The UMTS FP dissector could crash
    wnpa-sec-2016-53 CVE-2016-7178
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-54 CVE-2016-7179
  * The IPMI Trace dissector could crash
    wnpa-sec-2016-55 CVE-2016-7180
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html</changelog>
<changelog author="ecsos@opensuse.org" date="1473422401">- Wireshark 2.2.0:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.0.html
  * Drop wireshark-pkg-config.patch because code is now in upstream
  * Drop wireshark-1.12.6-fix-QT-PIC-PIE.patch because no more need
    for build. And create errors at build Tumbleweed.
  * Rebase wireshark-1.10.0-authors-pod2man.patch</changelog>
<changelog author="astieger@suse.com" date="1475668800">- Wireshark 2.2.1:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#1002981)
  * wnpa-sec-2016-56: The Bluetooth L2CAP dissector could crash
  * wnpa-sec-2016-57: The NCP dissector could crash
  * Further bug fixes and updated protocol support as listed in:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.1.html</changelog>
<changelog author="astieger@suse.com" date="1479384000">- Wireshark 2.2.2:
  * CVE-2016-9372: Profinet I/O long loop (boo#1010807)
  * CVE-2016-9374: AllJoyn crash (boo#1010752)
  * CVE-2016-9376: OpenFlow crash (boo#1010735)
  * CVE-2016-9373: DCERPC crash (boo#1010754)
  * CVE-2016-9375: DTN infinite loop (boo#1010740)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.2.html</changelog>
<changelog author="astieger@suse.com" date="1481716800">- Wireshark 2.2.3:
  * fix export related bugs
  * fix UI bugs
  * bugfix and corrections updates for dissectors
  * updated protocol support for BGP, BOOTP/DHCP, BTLE, DICOM,
    DOF, Echo, GTP, ICMP, Radiotap, RLC, RPC over RDMA, RTCP, SMB,
    TCP, UFTP4, and VXLAN</changelog>
<changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
<changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop</changelog>
<changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
<changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)
- add wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch
  to prevent compilation errors in QT</changelog>
<changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)
- drop wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch, is
  upstream</changelog>

</package>

<package pkgid="4517b56bfe66e91c8ed7d3515cc69ff19b66f89b26706880c772314a2292d800" name="wireshark-ui-qt" arch="x86_64">
    <version epoch="0" ver="2.2.8" rel="17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1449921600">- BuildRequire pkgconfig(Qt5Multimedia) too.</changelog>
<changelog author="astieger@suse.com" date="1451476800">- Wireshark 2.0.1
  fixing the following dissector crashes boo#960382:
  * NBAP dissector crashes.
    wnpa-sec-2015-31 CVE-2015-8711
  * NLM dissector crash.
    wnpa-sec-2015-37 CVE-2015-8718
  * BER dissector crash.
    wnpa-sec-2015-39 CVE-2015-8720
  * Zlib decompression crash.
    wnpa-sec-2015-40 CVE-2015-8721
  * SCTP dissector crash.
    wnpa-sec-2015-41 CVE-2015-8722
  * 802.11 decryption crash.
    wnpa-sec-2015-42 CVE-2015-8723 CVE-2015-8724
  * DIAMETER dissector crash.
    wnpa-sec-2015-43 CVE-2015-8725
  * VeriWave file parser crashes.
    wnpa-sec-2015-44 CVE-2015-8726
  * RSVP dissector crash.
    wnpa-sec-2015-45 CVE-2015-8727
  * ANSI A &amp; GSM A dissector crashes.
    wnpa-sec-2015-46 CVE-2015-8728
  * Ascend file parser crash.
    wnpa-sec-2015-47 CVE-2015-8729
  * NBAP dissector crash.
    npa-sec-2015-48 CVE-2015-8730
  * RSL dissector crash.
    wnpa-sec-2015-49 CVE-2015-8731
  * ZigBee ZCL dissector crash.
    wnpa-sec-2015-50 CVE-2015-8732
  * Sniffer file parser crash
    wnpa-sec-2015-51 CVE-2015-8733
  * NWP dissector crash.
    wnpa-sec-2015-52 CVE-2015-8734
  * BT ATT dissector crash.
    wnpa-sec-2015-53 CVE-2015-8735
  * MP2T file parser crash.
    wnpa-sec-2015-54 CVE-2015-8736
  * MP2T file parser crash.
    wnpa-sec-2015-55 CVE-2015-8737
  * S7COMM dissector crash.
    wnpa-sec-2015-56 CVE-2015-8738
  * IPMI dissector crash.
    wnpa-sec-2015-57 CVE-2015-8739
  * TDS dissector crash.
    wnpa-sec-2015-58 CVE-2015-8740
  * PPI dissector crash.
    wnpa-sec-2015-59 CVE-2015-8741
  * MS-WSP dissector crash.
    wnpa-sec-2015-60 CVE-2015-8742
- adjust wireshark-1.12.6-fix-QT-PIC-PIE.patch for upstream changes</changelog>
<changelog author="astieger@suse.com" date="1451908800">- Add CVEs for boo#960382</changelog>
<changelog author="astieger@suse.com" date="1455364800">- Recommend wireshark-ui instead of requiring it (boo#961170)
  to support text-only use</changelog>
<changelog author="astieger@suse.com" date="1456574400">- Wireshark 2.0.2 (boo#968565)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * CVE-2016-2522: ASN.1 BER dissector crash (wnpa-sec-2016-02)
  * CVE-2016-2523: DNP dissector infinite loop (wnpa-sec-2016-03)
  * CVE-2016-2524: X.509AF dissector crash (wnpa-sec-2016-04)
  * CVE-2016-2525: HTTP/2 dissector crash (wnpa-sec-2016-05)
  * CVE-2016-2526: HiQnet dissector crash (wnpa-sec-2016-06)
  * CVE-2016-2527: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)
  * CVE-2016-2528: LBMC dissector crash (wnpa-sec-2016-08)
  * CVE-2016-2529: iSeries file parser crash (wnpa-sec-2016-09)
  * CVE-2016-2530: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2531: RSL dissector crash (wnpa-sec-2016-10)
  * CVE-2016-2532: LLRP dissector crash (wnpa-sec-2016-11)
  * Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)
  * IEEE 802.11 dissector crash (wnpa-sec-2016-13)
  * GSM A-bis OML dissector crash (wnpa-sec-2016-14)
  * ASN.1 BER dissector crash (wnpa-sec-2016-15)
  * SPICE dissector large loop  (wnpa-sec-2016-16)
  * NFS dissector crash (wnpa-sec-2016-17)
  * ASN.1 BER dissector crash (wnpa-sec-2016-18)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.2.html</changelog>
<changelog author="astieger@suse.com" date="1461412800">- Wireshark 2.0.3 (boo#976944)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The NCP dissector could crash (wnpa-sec-2016-19)
  * TShark could crash due to a packet reassembly bug (wnpa-sec-2016-20)
  * The IEEE 802.11 dissector could crash (wnpa-sec-2016-21)
  * The PKTC dissector could crash (wnpa-sec-2016-22)
  * The PKTC dissector could crash (wnpa-sec-2016-23)
  * The IAX2 dissector could go into an infinite loop (wnpa-sec-2016-24)
  * Wireshark and TShark could exhaust the stack (wnpa-sec-2016-25)
  * The GSM CBCH dissector could crash (wnpa-sec-2016-26)
  * MS-WSP dissector crash (wnpa-sec-2016-27)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</changelog>
<changelog author="astieger@suse.com" date="1465387200">- Wireshark 2.0.4 (boo#983671)
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * The SPOOLS dissector could go into an infinite loop
    wnpa-sec-2016-29 CVE-2016-5350
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-30 CVE-2016-5351
  * The IEEE 802.11 dissector could crash
    wnpa-sec-2016-31 CVE-2016-5352
  * The UMTS FP dissector could crash
    wnpa-sec-2016-32 CVE-2016-5353
  * Some USB dissectors could crash
    wnpa-sec-2016-33 CVE-2016-5354
  * The Toshiba file parser could crash
    wnpa-sec-2016-34 CVE-2016-5355
  * The CoSine file parser could crash
    wnpa-sec-2016-35 CVE-2016-5356
  * The NetScreen file parser could crash
    wnpa-sec-2016-36 CVE-2016-5357
  * The Ethernet dissector could crash
    wnpa-sec-2016-37 CVE-2016-5358</changelog>
<changelog author="badshah400@gmail.com" date="1468584000">- Drop external wireshark.appdata.xml file, use the upstream
  bundled one instead.
- Use the bundled appdata file as a template to generate the
  proper appdata files for both the GTK and QT GUI applications;
  install separate appdata for both apps.</changelog>
<changelog author="astieger@suse.com" date="1469707200">- Wireshark 2.0.5:
  This release fixes a number issues in protocol dissectors that
  could have allowed a remote attacker to crash Wireshark or cause
  excessive CPU usage through specially crafted packages inserted
  into the network or a capture file.
  * PacketBB crash
    wnpa-sec-2016-41 bsc#991013 CVE-2016-6505
  * WSP infinite loop
    wnpa-sec-2016-42 bsc#991015 CVE-2016-6505
  * RLC long loop
    wnpa-sec-2016-44 bsc#991017 CVE-2016-6508
  * LDSS dissector crash
    wnpa-sec-2016-45 bsc#991018 CVE-2016-6509
  * RLC dissector crash
    wnpa-sec-2016-46 bsc#991019 CVE-2016-6510
  * OpenFlow long loop
    wnpa-sec-2016-47 bsc#991020 CVE-2016-6511
  * MMSE, WAP, WBXML, and WSP infinite loop
    wnpa-sec-2016-48 bsc#991021 CVE-2016-6512
  * WBXML crash
    wnpa-sec-2016-49 bsc#991022 CVE-2016-6513
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.5.html</changelog>
<changelog author="astieger@suse.com" date="1473076800">- fix permissions warning on appdata, does not need +x</changelog>
<changelog author="astieger@suse.com" date="1473422400">- Wireshark 2.0.6:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#998099)
  * The QNX6 QNET dissector could crash
    wnpa-sec-2016-50 CVE-2016-7175
  * The H.225 dissector could crash
    wnpa-sec-2016-51 CVE-2016-7176
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-52 CVE-2016-7177
  * The UMTS FP dissector could crash
    wnpa-sec-2016-53 CVE-2016-7178
  * The Catapult DCT2000 dissector could crash
    wnpa-sec-2016-54 CVE-2016-7179
  * The IPMI Trace dissector could crash
    wnpa-sec-2016-55 CVE-2016-7180
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.0.6.html</changelog>
<changelog author="ecsos@opensuse.org" date="1473422401">- Wireshark 2.2.0:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.0.html
  * Drop wireshark-pkg-config.patch because code is now in upstream
  * Drop wireshark-1.12.6-fix-QT-PIC-PIE.patch because no more need
    for build. And create errors at build Tumbleweed.
  * Rebase wireshark-1.10.0-authors-pod2man.patch</changelog>
<changelog author="astieger@suse.com" date="1475668800">- Wireshark 2.2.1:
  This release fixes a number of issues that made it possible to
  make Wireshark crash by injecting a malformed packet onto the
  wire or by convincing someone to read a malformed packet trace
  file. (bsc#1002981)
  * wnpa-sec-2016-56: The Bluetooth L2CAP dissector could crash
  * wnpa-sec-2016-57: The NCP dissector could crash
  * Further bug fixes and updated protocol support as listed in:
  * Bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.1.html</changelog>
<changelog author="astieger@suse.com" date="1479384000">- Wireshark 2.2.2:
  * CVE-2016-9372: Profinet I/O long loop (boo#1010807)
  * CVE-2016-9374: AllJoyn crash (boo#1010752)
  * CVE-2016-9376: OpenFlow crash (boo#1010735)
  * CVE-2016-9373: DCERPC crash (boo#1010754)
  * CVE-2016-9375: DTN infinite loop (boo#1010740)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.2.html</changelog>
<changelog author="astieger@suse.com" date="1481716800">- Wireshark 2.2.3:
  * fix export related bugs
  * fix UI bugs
  * bugfix and corrections updates for dissectors
  * updated protocol support for BGP, BOOTP/DHCP, BTLE, DICOM,
    DOF, Echo, GTP, ICMP, Radiotap, RLC, RPC over RDMA, RTCP, SMB,
    TCP, UFTP4, and VXLAN</changelog>
<changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
<changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop</changelog>
<changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
<changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)
- add wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch
  to prevent compilation errors in QT</changelog>
<changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loopsm or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)
- drop wireshark-2.2.7-fix-QT-setTextInteractionFlags.patch, is
  upstream</changelog>

</package>

</otherdata>